Block non-sandboxed plugins.

chrome/renderer/render_view.h

 // Copyright (c) 2010 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CHROME_RENDERER_RENDER_VIEW_H_
 #define CHROME_RENDERER_RENDER_VIEW_H_
 #pragma once
 
 #include <deque>
 #include <map>
@@ skipping 257 matching lines @@
   // plugin. See default_plugin_shared.h for possible values of |status|.
   void OnMissingPluginStatus(WebPluginDelegateProxy* delegate,
                              int status);
 
   // Notification that the given pepper plugin we created is being deleted the
   // pointer must not be dereferenced as this is called from the destructor of
   // the plugin.
   void OnPepperPluginDestroy(WebPluginDelegatePepper* pepper_plugin);
 
   // Create a new plugin without checking the content settings.
-  WebKit::WebPlugin* CreatePluginInternal(
-      WebKit::WebFrame* frame,
-      const WebKit::WebPluginParams& params,
-      WebPluginInfo* plugin_info,
-      const std::string& mime_type);
+  WebKit::WebPlugin* CreatePluginNoCheck(WebKit::WebFrame* frame,
+                                         const WebKit::WebPluginParams& params);
 
   // Asks the browser for the CPBrowsingContext associated with this renderer.
   // This is an opaque identifier associated with the renderer for sending
   // messages for the given "Chrome Plugin." The Chrome Plugin API is used
   // only by gears and this function can be deleted when we remove gears.
   uint32 GetCPBrowsingContext();
 
 #if defined(OS_MACOSX)
   // Helper routines for GPU plugin support. Used by the
   // WebPluginDelegateProxy, which has a pointer to the RenderView.
@@ skipping 556 matching lines @@
   // by preferred_size_change_timer_.
   void CheckPreferredSize();
 
   // Resets the |content_blocked_| array.
   void ClearBlockedContentSettings();
 
   // Creates DevToolsClient and sets up JavaScript bindings for developer tools
   // UI that is going to be hosted by this RenderView.
   void CreateDevToolsClient();
 
+  // Create a new NPAPI plugin.
+  WebKit::WebPlugin* CreateNPAPIPlugin(WebKit::WebFrame* frame,
+                                       const WebKit::WebPluginParams& params,
+                                       const FilePath& path,
+                                       const std::string& mime_type);
+
+  // Create a new Pepper plugin.
+  WebKit::WebPlugin* CreatePepperPlugin(WebKit::WebFrame* frame,
+                                        const WebKit::WebPluginParams& params,
+                                        const FilePath& path,
+                                        pepper::PluginModule* pepper_module);
+
   // Create a new placeholder for a blocked plugin.
   WebKit::WebPlugin* CreatePluginPlaceholder(
       WebKit::WebFrame* frame,
       const WebKit::WebPluginParams& params);
 
   // Sends an IPC notification that the specified content type was blocked.
   void DidBlockContentType(ContentSettingsType settings_type);
 
   // This callback is triggered when DownloadImage completes, either
   // succesfully or with a failure. See DownloadImage for more details.
@@ skipping 405 matching lines @@
   // ADDING NEW DATA? Please see if it fits appropriately in one of the above
   // sections rather than throwing it randomly at the end. If you're adding a
   // bunch of stuff, you should probably create a helper class and put your
   // data and methods on that to avoid bloating RenderView more.
   // ---------------------------------------------------------------------------
 
   DISALLOW_COPY_AND_ASSIGN(RenderView);
 };
 
 #endif  // CHROME_RENDERER_RENDER_VIEW_H_