Disable outdated plugins, block non-sandboxed plugins.

chrome/browser/plugin_updater.cc

 // Copyright (c) 2010 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/plugin_updater.h"
 
 #include <string>
 #include <vector>
 
+#include "base/command_line.h"
 #include "base/path_service.h"
 #include "base/scoped_ptr.h"
 #include "base/values.h"
 #include "chrome/browser/pref_service.h"
 #include "chrome/browser/profile.h"
 #include "chrome/common/chrome_paths.h"
+#include "chrome/common/chrome_switches.h"
 #include "chrome/common/plugin_group.h"
 #include "chrome/common/pref_names.h"
 #include "webkit/glue/plugins/plugin_list.h"
 #include "webkit/glue/plugins/webplugininfo.h"
 
 namespace plugin_updater {
 
 // Convert to a List of Groups
 static void GetPluginGroups(
     std::vector<linked_ptr<PluginGroup> >* plugin_groups) {
@@ skipping 173 matching lines @@
       EnablePluginGroup(false, current_group_name);
   }
 
   if (!enable_internal_pdf_ && !found_internal_pdf) {
     // The internal PDF plugin is disabled by default, and the user hasn't
     // overridden the default.
     NPAPI::PluginList::Singleton()->DisablePlugin(pdf_path);
   }
 }
 
+void DisableOutdatedPluginGroups() {
+  std::vector<linked_ptr<PluginGroup> > groups;
+  GetPluginGroups(&groups);
+  for (std::vector<linked_ptr<PluginGroup> >::iterator it =
+       groups.begin();
+       it != groups.end();
+       ++it) {
+    if ((*it)->IsVulnerable()) {
+      (*it)->Enable(false);
+    }
+  }
+}
+
 void UpdatePreferences(Profile* profile) {
   ListValue* plugins_list = profile->GetPrefs()->GetMutableList(
       prefs::kPluginsPluginsList);
   plugins_list->Clear();
 
   FilePath internal_dir;
   if (PathService::Get(chrome::DIR_INTERNAL_PLUGINS, &internal_dir))
     profile->GetPrefs()->SetFilePath(prefs::kPluginsLastInternalDirectory,
                                      internal_dir);
 
   // Add the plugin files.
   std::vector<WebPluginInfo> plugins;
   NPAPI::PluginList::Singleton()->GetPlugins(false, &plugins);
   for (std::vector<WebPluginInfo>::const_iterator it = plugins.begin();
        it != plugins.end();
        ++it) {
     plugins_list->Append(CreatePluginFileSummary(*it));
   }
 
   // Add the groups as well.
   std::vector<linked_ptr<PluginGroup> > plugin_groups;
   GetPluginGroups(&plugin_groups);
   for (std::vector<linked_ptr<PluginGroup> >::iterator it =
        plugin_groups.begin();
        it != plugin_groups.end();
        ++it) {
     // Don't save preferences for vulnerable pugins.
-    if (!(*it)->IsVulnerable()) {
+    if (!CommandLine::ForCurrentProcess()->HasSwitch(
+          switches::kDisableOutdatedPlugins) ||
+        !(*it)->IsVulnerable()) {
       plugins_list->Append((*it)->GetSummary());
     }
   }
 }
 
 }  // namespace plugin_updater