Disable outdated plugins, block non-sandboxed plugins.

chrome/browser/plugin_updater.cc

Index: chrome/browser/plugin_updater.cc
diff --git a/chrome/browser/plugin_updater.cc b/chrome/browser/plugin_updater.cc
index 0691bac6ece6cdac4d4c1e5da6b9cf458f8f8065..cb0fe670004c6caf86086c42ff58d8ffe2365852 100644
--- a/chrome/browser/plugin_updater.cc
+++ b/chrome/browser/plugin_updater.cc
@@ -7,12 +7,14 @@
 #include <string>
 #include <vector>
 
+#include "base/command_line.h"
 #include "base/path_service.h"
 #include "base/scoped_ptr.h"
 #include "base/values.h"
 #include "chrome/browser/pref_service.h"
 #include "chrome/browser/profile.h"
 #include "chrome/common/chrome_paths.h"
+#include "chrome/common/chrome_switches.h"
 #include "chrome/common/plugin_group.h"
 #include "chrome/common/pref_names.h"
 #include "webkit/glue/plugins/plugin_list.h"
@@ -206,6 +208,19 @@ void DisablePluginGroupsFromPrefs(Profile* profile) {
   }
 }
 
+void DisableOutdatedPluginGroups() {
+  std::vector<linked_ptr<PluginGroup> > groups;
+  GetPluginGroups(&groups);
+  for (std::vector<linked_ptr<PluginGroup> >::iterator it =
+       groups.begin();
+       it != groups.end();
+       ++it) {
+    if ((*it)->IsVulnerable()) {
+      (*it)->Enable(false);
+    }
+  }
+}
+
 void UpdatePreferences(Profile* profile) {
   ListValue* plugins_list = profile->GetPrefs()->GetMutableList(
       prefs::kPluginsPluginsList);
@@ -233,7 +248,9 @@ void UpdatePreferences(Profile* profile) {
        it != plugin_groups.end();
        ++it) {
     // Don't save preferences for vulnerable pugins.
-    if (!(*it)->IsVulnerable()) {
+    if (!CommandLine::ForCurrentProcess()->HasSwitch(
+          switches::kDisableOutdatedPlugins) ||
+        !(*it)->IsVulnerable()) {
       plugins_list->Append((*it)->GetSummary());
     }
   }