Only load whitelisted plugins on the Mac

webkit/glue/plugins/plugin_list_mac.mm

 // Copyright (c) 2006-2009 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "webkit/glue/plugins/plugin_list.h"
 
 #import <Foundation/Foundation.h>
 
 #include "base/file_util.h"
 #include "base/mac_util.h"
+#include "base/string_util.h"
 #include "webkit/glue/plugins/plugin_lib.h"
 
 namespace {
 
 void GetPluginCommonDirectory(std::vector<FilePath>* plugin_dirs,
                               bool user) {
   // Note that there are no NSSearchPathDirectory constants for these
   // directories so we can't use Cocoa's NSSearchPathForDirectoriesInDomains().
   // Interestingly, Safari hard-codes the location (see
   // WebKit/WebKit/mac/Plugins/WebPluginDatabase.mm's +_defaultPlugInPaths).
@@ skipping 38 matching lines @@
   file_util::FileEnumerator enumerator(path,
                                        false, // not recursive
                                        file_util::FileEnumerator::DIRECTORIES);
   for (FilePath path = enumerator.Next(); !path.value().empty();
        path = enumerator.Next()) {
     LoadPlugin(path);
   }
 }
 
 bool PluginList::ShouldLoadPlugin(const WebPluginInfo& info) {
+  // For now, only load plugins that we know are working reasonably well.
+  // Anything using QuickDraw-based drawing, for example, would crash
+  // immediately.
+  std::string plugin_name = WideToUTF8(info.name);
+  if (!(plugin_name == "Shockwave Flash" ||  // CG drawing + Carbon events.
+        plugin_name == "Picasa")) {          // No drawing or event handling.
+    return false;
+  }
+
   // Hierarchy check
   // (we're loading plugins hierarchically from Library folders, so plugins we
   //  encounter earlier must override plugins we encounter later)
-
-  // first, test to make sure the user really wants plugins
-
   for (size_t i = 0; i < plugins_.size(); ++i) {
     if (plugins_[i].path.BaseName() == info.path.BaseName()) {
       return false;  // We already have a loaded plugin higher in the hierarchy.
     }
   }
 
   return true;
 }
 
 void PluginList::LoadInternalPlugins() {
   // none for now
 }
 
 } // namespace NPAPI