Disable outdated plugins, block non-sandboxed plugins.

chrome/renderer/render_view.h

 // Copyright (c) 2010 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CHROME_RENDERER_RENDER_VIEW_H_
 #define CHROME_RENDERER_RENDER_VIEW_H_
 
 #include <deque>
 #include <map>
 #include <queue>
 #include <set>
 #include <string>
 #include <vector>
 
 #include "app/surface/transport_dib.h"
 #include "base/basictypes.h"
 #include "base/file_path.h"
 #include "base/id_map.h"
 #include "base/linked_ptr.h"
 #include "base/shared_memory.h"
 #include "base/timer.h"
 #include "base/values.h"
 #include "base/weak_ptr.h"
 #include "build/build_config.h"
 #include "chrome/common/content_settings.h"
 #include "chrome/common/edit_command.h"
 #include "chrome/common/navigation_gesture.h"
-#include "chrome/common/notification_type.h"
 #include "chrome/common/page_zoom.h"
 #include "chrome/common/render_messages.h"
 #include "chrome/common/renderer_preferences.h"
 #include "chrome/common/translate_errors.h"
 #include "chrome/common/view_types.h"
 #include "chrome/renderer/automation/dom_automation_controller.h"
 #include "chrome/renderer/dom_ui_bindings.h"
 #include "chrome/renderer/extensions/extension_process_bindings.h"
 #include "chrome/renderer/external_host_bindings.h"
 #include "chrome/renderer/form_manager.h"
@@ skipping 36 matching lines @@
 class AudioMessageFilter;
 class DictionaryValue;
 class DevToolsAgent;
 class DevToolsClient;
 class FilePath;
 class GeolocationDispatcher;
 class GURL;
 class ListValue;
 class NavigationState;
 class PepperDeviceTest;
+class PluginGroup;
 class PrintWebViewHelper;
 class SkBitmap;
 class WebPluginDelegatePepper;
 class WebPluginDelegateProxy;
 struct ContextMenuMediaParams;
 struct ThumbnailScore;
 struct ViewMsg_ClosePage_Params;
 struct ViewMsg_Navigate_Params;
 struct WebDropData;
 
@@ skipping 175 matching lines @@
   // Notification that the default plugin has done something about a missing
   // plugin. See default_plugin_shared.h for possible values of |status|.
   void OnMissingPluginStatus(WebPluginDelegateProxy* delegate,
                              int status);
 
   // Notification that the given pepper plugin we created is being deleted the
   // pointer must not be dereferenced as this is called from the destructor of
   // the plugin.
   void OnPepperPluginDestroy(WebPluginDelegatePepper* pepper_plugin);
 
-  // Create a new plugin without checking the content settings.
-  WebKit::WebPlugin* CreatePluginInternal(
-      WebKit::WebFrame* frame,
-      const WebKit::WebPluginParams& params);
+  // Create a new Pepper plugin without checking the content settings.
+  WebKit::WebPlugin* CreatePepperPlugin(pepper::PluginModule* pepper_module,
+                                        const WebKit::WebPluginParams& params);
+
+  // Create a new NPAPI plugin without checking the content settings.
+  WebKit::WebPlugin* CreateNPAPIPlugin(WebKit::WebFrame* frame,
+                                       const WebKit::WebPluginParams& params,
+                                       WebPluginInfo* plugin_info,
+                                       const std::string& mime_type);
 
   // Asks the browser for the CPBrowsingContext associated with this renderer.
   // This is an opaque identifier associated with the renderer for sending
   // messages for the given "Chrome Plugin." The Chrome Plugin API is used
   // only by gears and this function can be deleted when we remove gears.
   uint32 GetCPBrowsingContext();
 
 #if defined(OS_MACOSX)
   // Helper routines for GPU plugin support. Used by the
   // WebPluginDelegateProxy, which has a pointer to the RenderView.
@@ skipping 477 matching lines @@
   void OnGetAllSavableResourceLinksForCurrentPage(const GURL& page_url);
   void OnGetApplicationInfo(int page_id);
   void OnGetSerializedHtmlDataForCurrentPageWithLocalLinks(
       const std::vector<GURL>& links,
       const std::vector<FilePath>& local_paths,
       const FilePath& local_directory_name);
   void OnHandleMessageFromExternalHost(const std::string& message,
                                        const std::string& origin,
                                        const std::string& target);
   void OnInstallMissingPlugin();
+  void OnLoadBlockedPlugins();
   void OnMediaPlayerActionAt(const gfx::Point& location,
                              const WebKit::WebMediaPlayerAction& action);
   void OnMoveOrResizeStarted();
   void OnNavigate(const ViewMsg_Navigate_Params& params);
   void OnNotifyRendererViewType(ViewType::Type view_type);
   void OnFillPasswordForm(
       const webkit_glue::PasswordFormFillData& form_data);
   void OnPaste();
   void OnPrintingDone(int document_cookie, bool success);
   void OnPrintPages();
@@ skipping 66 matching lines @@
   // Resets the |content_blocked_| array.
   void ClearBlockedContentSettings();
 
   // Creates DevToolsClient and sets up JavaScript bindings for developer tools
   // UI that is going to be hosted by this RenderView.
   void CreateDevToolsClient();
 
   // Create a new placeholder for a blocked plugin.
   WebKit::WebPlugin* CreatePluginPlaceholder(
       WebKit::WebFrame* frame,
-      const WebKit::WebPluginParams& params);
+      const WebKit::WebPluginParams& params,
+      PluginGroup* group);
 
   // Sends an IPC notification that the specified content type was blocked.
   void DidBlockContentType(ContentSettingsType settings_type);
 
   // This callback is triggered when DownloadImage completes, either
   // succesfully or with a failure. See DownloadImage for more details.
   void DidDownloadImage(webkit_glue::ImageResourceFetcher* fetcher,
                         const SkBitmap& image);
 
   // Requests to download an image. When done, the RenderView is
@@ skipping 432 matching lines @@
   // ADDING NEW DATA? Please see if it fits appropriately in one of the above
   // sections rather than throwing it randomly at the end. If you're adding a
   // bunch of stuff, you should probably create a helper class and put your
   // data and methods on that to avoid bloating RenderView more.
   // ---------------------------------------------------------------------------
 
   DISALLOW_COPY_AND_ASSIGN(RenderView);
 };
 
 #endif  // CHROME_RENDERER_RENDER_VIEW_H_