Put some plug-ins behind an infobar, where they have:...

webkit/plugins/npapi/plugin_group.h

Index: webkit/plugins/npapi/plugin_group.h
===================================================================
--- webkit/plugins/npapi/plugin_group.h	(revision 72249)
+++ webkit/plugins/npapi/plugin_group.h	(working copy)
@@ -79,6 +79,14 @@
   // enabled.
   static const char* kAdobeReaderGroupName;
   static const char* kAdobeReaderUpdateURL;
+  // Some plug-ins, by default, need user authorization. These plug-ins have:
+  // - A relatively large install base (>= 25%)
+  // - A relatively low usage rate (~10% and below)
+  // - Been targetted successfully by malware authors
+  static const char* kJavaGroupName;
+  static const char* kIcedTeaGroupName;
+  static const char* kQuickTimeGroupName;
+  static const char* kShockwaveGroupName;
 
   PluginGroup(const PluginGroup& other);
 
@@ -138,6 +146,10 @@
   // security problems.
   bool IsVulnerable() const;
 
+  // Returns true if this plug-in group always requires user authorization
+  // to run.
+  bool RequiresAuthorization() const;
+
   // Disables all plugins in this group that are older than the
   // minimum version.
   void DisableOutdatedPlugins();