Make <all_urls> and file:///* in permissions trigger "Allow file access"

chrome/browser/extensions/extension_prefs.cc

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/extensions/extension_prefs.h"
 
 #include "base/string_number_conversions.h"
 #include "base/string_util.h"
 #include "base/utf_string_conversions.h"
 #include "chrome/browser/extensions/extension_pref_store.h"
 #include "chrome/browser/prefs/pref_notifier.h"
 #include "chrome/browser/prefs/scoped_user_pref_update.h"
+#include "chrome/common/url_constants.h"
 #include "chrome/common/extensions/extension.h"
 #include "chrome/common/extensions/url_pattern.h"
 #include "chrome/common/pref_names.h"
 #include "content/common/notification_service.h"
 
 using base::Time;
 
 namespace {
 
 // Additional preferences keys
@@ skipping 537 matching lines @@
   ReadExtensionPrefStringSet(
       extension_id, kPrefGrantedPermissionsAPI, api_permissions);
 
   std::set<std::string> host_permissions;
   ReadExtensionPrefStringSet(
       extension_id, kPrefGrantedPermissionsHost, &host_permissions);
 
   // The granted host permissions contain hosts from the manifest's
   // "permissions" array and from the content script "matches" arrays,
   // so the URLPattern needs to accept valid schemes from both types.
+  // file:/// is temporarily included, but is removed below if not actually
+  // allowed.
+  int valid_schemes = Extension::kValidHostPermissionSchemes |
+        UserScript::kValidUserScriptSchemes | URLPattern::SCHEME_FILE;
+  bool allow_file_access = AllowFileAccess(extension_id);
+
   for (std::set<std::string>::iterator i = host_permissions.begin();
        i != host_permissions.end(); ++i) {
-    URLPattern pattern(
-        Extension::kValidHostPermissionSchemes |
-        UserScript::kValidUserScriptSchemes);
+    URLPattern pattern(valid_schemes);
 
     // Parse without strict checks, so that new strict checks do not
     // fail on a pattern in an installed extension.
     if (URLPattern::PARSE_SUCCESS != pattern.Parse(
             *i, URLPattern::PARSE_LENIENT)) {
       NOTREACHED();  // Corrupt prefs?  Hand editing?
     } else {
+      if (!allow_file_access && pattern.MatchesScheme(chrome::kFileScheme)) {
+        if (pattern.scheme() == chrome::kFileScheme) {
+          continue;
+        } else {
+          CHECK_EQ("*", pattern.scheme());
+          pattern.set_valid_schemes(
+              pattern.valid_schemes() & ~URLPattern::SCHEME_FILE);
+        }
+      }
       host_extent->AddPattern(pattern);
     }
   }
 
   return true;
 }
 
 void ExtensionPrefs::AddGrantedPermissions(
     const std::string& extension_id,
     const bool full_access,
@@ skipping 826 matching lines @@
 void ExtensionPrefs::RegisterUserPrefs(PrefService* prefs) {
   prefs->RegisterDictionaryPref(kExtensionsPref);
   prefs->RegisterListPref(kExtensionToolbar);
   prefs->RegisterIntegerPref(prefs::kExtensionToolbarSize, -1);
   prefs->RegisterDictionaryPref(kExtensionsBlacklistUpdate);
   prefs->RegisterListPref(prefs::kExtensionInstallAllowList);
   prefs->RegisterListPref(prefs::kExtensionInstallDenyList);
   prefs->RegisterListPref(prefs::kExtensionInstallForceList);
   prefs->RegisterStringPref(kWebStoreLogin, std::string() /* default_value */);
 }