Disable outdated plugins, block non-sandboxed plugins.

chrome/common/plugin_group.h

Index: chrome/common/plugin_group.h
diff --git a/chrome/common/plugin_group.h b/chrome/common/plugin_group.h
index f9f6ce3ee215bebdc33fe0e1abc3e11d40a509d2..39b8b89333ae3f09264c0d82269a41d77e40f657 100644
--- a/chrome/common/plugin_group.h
+++ b/chrome/common/plugin_group.h
@@ -26,9 +26,13 @@ struct PluginGroupDefinition {
   const char* update_url;  // Location of latest secure version.
 };
 
+// A PluginGroup can match a range of versions of a specific plugin (as defined
+// by matching a substring of its name).
+// It contains all WebPluginInfo structs (at least one) matching its definition.
+// In addition, it knows about a security "baseline", i.e. the minimum version
+// of a plugin that is needed in order not to exhibit known security
+// vulnerabilities.
 
-// A PluginGroup contains at least one WebPluginInfo.
-// In addition, it knows if the plugin is critically vulnerable.
 class PluginGroup {
  public:
   // Creates a PluginGroup from a PluginGroupDefinition.
@@ -39,7 +43,9 @@ class PluginGroup {
   // definition is found.
   static PluginGroup* FromWebPluginInfo(const WebPluginInfo& wpi);
 
-  // Find a plugin group matching |info| in the list of hardcoded plugins.
+  // Find a plugin group matching |info| in the list of hardcoded plugins and
+  // returns a copy of it if found, or a new group matching exactly this plugin
+  // otherwise.
   static PluginGroup* FindHardcodedPluginGroup(const WebPluginInfo& info);
 
   // Configures the set of plugin names that are disabled by policy.