Apply missing ReferencesParent check

content/browser/child_process_security_policy_impl.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "content/browser/child_process_security_policy_impl.h"
 
 #include "base/file_path.h"
 #include "base/logging.h"
 #include "base/metrics/histogram.h"
 #include "base/platform_file.h"
@@ skipping 126 matching lines @@
       if (net::FileURLToFilePath(url, &path))
         return request_file_set_.find(path) != request_file_set_.end();
     }
 
     return false;  // Unmentioned schemes are disallowed.
   }
 
   // Determine if the certain permissions have been granted to a file.
   bool HasPermissionsForFile(const FilePath& file, int permissions) {
     FilePath current_path = file.StripTrailingSeparators();
+    if (current_path.ReferencesParent())
+      return false;

[piman, 2012/11/19 17:56:05]

TBH, without more context, this seems overly restrictive. Could you give me some
context, maybe add me to the bug?

+
     FilePath last_path;
     while (current_path != last_path) {
       if (file_permissions_.find(current_path) != file_permissions_.end())
         return (file_permissions_[current_path] & permissions) == permissions;
       last_path = current_path;
       current_path = current_path.DirName();
     }
 
     return false;
   }
@@ skipping 466 matching lines @@
     int permission) {
   base::AutoLock lock(lock_);
 
   SecurityStateMap::iterator state = security_state_.find(child_id);
   if (state == security_state_.end())
     return false;
   return state->second->HasPermissionsForFileSystem(filesystem_id, permission);
 }
 
 }  // namespace content