Disallow apps with the wrong content type header.

chrome/browser/extensions/crx_installer.h

 // Copyright (c) 2009 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CHROME_BROWSER_EXTENSIONS_CRX_INSTALLER_H_
 #define CHROME_BROWSER_EXTENSIONS_CRX_INSTALLER_H_
 
 #include <string>
 
 #include "base/file_path.h"
@@ skipping 72 matching lines @@
     allow_privilege_increase_ = val;
   }
 
   bool limit_web_extent_to_download_host() const {
     return limit_web_extent_to_download_host_;
   }
   void set_limit_web_extent_to_download_host(bool val) {
     limit_web_extent_to_download_host_ = val;
   }
 
+  // If |apps_require_extension_mime_type_| is set to true, be sure to set
+  // |original_mime_type_| as well.
+  void set_apps_require_extension_mime_type(
+      bool apps_require_extension_mime_type) {
+    apps_require_extension_mime_type_ = apps_require_extension_mime_type;
+  }
+
+  void set_original_mime_type(const std::string& original_mime_type) {
+    original_mime_type_ = original_mime_type;
+  }
+
  private:
   ~CrxInstaller();
 
   // Converts the source user script to an extension.
   void ConvertUserScriptOnFileThread();
 
   // SandboxedExtensionUnpackerClient
   virtual void OnUnpackFailure(const std::string& error_message);
   virtual void OnUnpackSuccess(const FilePath& temp_dir,
                                const FilePath& extension_dir,
@@ skipping 78 matching lines @@
   // The client we will work with to do the installation. This can be NULL, in
   // which case the install is silent.
   // NOTE: we may be deleted on the file thread. To ensure the UI is deleted on
   // the main thread we don't use a scoped_ptr here.
   ExtensionInstallUI* client_;
 
   // The root of the unpacked extension directory. This is a subdirectory of
   // temp_dir_, so we don't have to delete it explicitly.
   FilePath unpacked_extension_root_;
 
+  // True when the CRX being installed was just downloaded.
+  // Used to trigger extra checks before installing.
+  bool apps_require_extension_mime_type_;
+
+  // The value of the content type header sent with the CRX.
+  // Ignorred unless |require_extension_mime_type_| is true.
+  std::string original_mime_type_;
+
   DISALLOW_COPY_AND_ASSIGN(CrxInstaller);
 };
 
 #endif  // CHROME_BROWSER_EXTENSIONS_CRX_INSTALLER_H_