When ChromeFrame is running in privileged mode, we should fail the IAuthentic...

chrome_frame/urlmon_url_request.cc

 // Copyright (c) 2009 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome_frame/urlmon_url_request.h"
 
 #include <wininet.h>
 #include <urlmon.h>
 
 #include "base/scoped_ptr.h"
@@ skipping 21 matching lines @@
                                       size_to_write);
   if (size_written)
     *size_written = size_to_write;
   return S_OK;
 }
 
 UrlmonUrlRequest::UrlmonUrlRequest()
     : pending_read_size_(0),
       headers_received_(false),
       thread_(NULL),
-      parent_window_(NULL) {
+      parent_window_(NULL),
+      privileged_mode_(false) {
   DLOG(INFO) << StringPrintf("Created request. Obj: %X", this);
 }
 
 UrlmonUrlRequest::~UrlmonUrlRequest() {
   DLOG(INFO) << StringPrintf("Deleted request. Obj: %X", this);
 }
 
 bool UrlmonUrlRequest::Start() {
   thread_ = PlatformThread::CurrentId();
   status_.Start();
@@ skipping 486 matching lines @@
   // TODO(iyengar): This hits when running the URL request tests.
   DLOG_IF(ERROR, !::IsWindow(parent_window_))
       << "UrlmonUrlRequest::GetWindow - no window!";
   *parent_window = parent_window_;
   return S_OK;
 }
 
 STDMETHODIMP UrlmonUrlRequest::Authenticate(HWND* parent_window,
                                             LPWSTR* user_name,
                                             LPWSTR* password) {
-  if (!parent_window) {
+  if (!parent_window)
     return E_INVALIDARG;
-  }
+
+  if (privileged_mode_)
+    return E_FAIL;
 
   DCHECK(::IsWindow(parent_window_));
   *parent_window = parent_window_;
   return S_OK;
 }
 
 STDMETHODIMP UrlmonUrlRequest::OnSecurityProblem(DWORD problem) {
   // Urlmon notifies the client of authentication problems, certificate
   // errors, etc by querying the object implementing the IBindStatusCallback
   // interface for the IHttpSecurity interface. If this interface is not
@@ skipping 328 matching lines @@
 
   new_request->Initialize(static_cast<PluginUrlRequestDelegate*>(this),
       request_id,
       request_info.url,
       request_info.method,
       request_info.referrer,
       request_info.extra_request_headers,
       request_info.upload_data,
       enable_frame_busting_);
   new_request->set_parent_window(notification_window_);
+  new_request->set_privileged_mode(privileged_mode_);
 
   // Shall we use previously fetched data?
   if (request_for_url.get()) {
     new_request->SetRequestData(request_for_url->request_data());
   }
 
   DCHECK(LookupRequest(request_id).get() == NULL);
   request_map_[request_id] = new_request;
   map_empty_.Reset();
   new_request->Start();
@@ skipping 122 matching lines @@
 scoped_refptr<UrlmonUrlRequest> UrlmonUrlRequestManager::LookupRequest(
     int request_id) {
   RequestMap::iterator it = request_map_.find(request_id);
   if (request_map_.end() != it)
     return it->second;
   return NULL;
 }
 
 UrlmonUrlRequestManager::UrlmonUrlRequestManager()
     : stopping_(false), worker_thread_("UrlMon fetch thread"),
-      map_empty_(true, true), notification_window_(NULL) {
+      map_empty_(true, true), notification_window_(NULL),
+      privileged_mode_(false) {
 }
 
 UrlmonUrlRequestManager::~UrlmonUrlRequestManager() {
   StopAll();
 }
 
 // Called from UI thread.
 void UrlmonUrlRequestManager::StealMonikerFromRequest(int request_id,
                                                       IMoniker** moniker) {
   base::WaitableEvent done(true, false);
@@ skipping 58 matching lines @@
     privacy_entry.flags |= flags;
     privacy_entry.policy_ref = UTF8ToWide(policy_ref);
   }
 
   if (fire_privacy_event && IsWindow(notification_window_)) {
     PostMessage(notification_window_, WM_FIRE_PRIVACY_CHANGE_NOTIFICATION, 1,
                 0);
   }
 }