Change ChildProcessSecurityPolicy to store a list of allowed flags for...

chrome/browser/renderer_host/blob_dispatcher_host.cc

 // Copyright (c) 2010 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/renderer_host/blob_dispatcher_host.h"
 
 #include "chrome/browser/child_process_security_policy.h"
 #include "chrome/browser/chrome_blob_storage_context.h"
 #include "chrome/browser/chrome_thread.h"
 #include "chrome/common/render_messages.h"
@@ skipping 40 matching lines @@
 
 // Check if the child process has been granted permission to register the files.
 bool BlobDispatcherHost::CheckPermission(
     webkit_blob::BlobData* blob_data) const {
   ChildProcessSecurityPolicy* policy =
       ChildProcessSecurityPolicy::GetInstance();
   for (std::vector<webkit_blob::BlobData::Item>::const_iterator iter =
            blob_data->items().begin();
        iter != blob_data->items().end(); ++iter) {
     if (iter->type() == webkit_blob::BlobData::TYPE_FILE) {
-      if (!policy->CanUploadFile(process_id_, iter->file_path()))
+      if (!policy->CanReadFile(process_id_, iter->file_path()))
         return false;
     }
   }
   return true;
 }
 
 void BlobDispatcherHost::OnRegisterBlobUrl(
     const GURL& url, const scoped_refptr<webkit_blob::BlobData>& blob_data) {
   DCHECK(ChromeThread::CurrentlyOn(ChromeThread::IO));
   if (!CheckPermission(blob_data.get()))
     return;
   blob_storage_context_->controller()->RegisterBlobUrl(url, blob_data);
   blob_urls_.insert(url.spec());
 }
 
 void BlobDispatcherHost::OnRegisterBlobUrlFrom(
     const GURL& url, const GURL& src_url) {
   DCHECK(ChromeThread::CurrentlyOn(ChromeThread::IO));
   blob_storage_context_->controller()->RegisterBlobUrlFrom(url, src_url);
   blob_urls_.insert(src_url.spec());
 }
 
 void BlobDispatcherHost::OnUnregisterBlobUrl(const GURL& url) {
   DCHECK(ChromeThread::CurrentlyOn(ChromeThread::IO));
   blob_storage_context_->controller()->UnregisterBlobUrl(url);
   blob_urls_.erase(url.spec());
 }