File API changes needed for safely passing user selected file entities from the file browser comp...

webkit/fileapi/file_system_path_manager.h

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef WEBKIT_FILEAPI_FILE_SYSTEM_PATH_MANAGER_H_
 #define WEBKIT_FILEAPI_FILE_SYSTEM_PATH_MANAGER_H_
 #pragma once
 
 #include "base/callback.h"
 #include "base/file_path.h"
 #include "base/file_util.h"
 #include "webkit/fileapi/file_system_types.h"
 #include "webkit/quota/special_storage_policy.h"
 
 class GURL;
 
 namespace base {
 class MessageLoopProxy;
 }
 
 namespace fileapi {
 
-class FileSystemMountPointProvider;
+class ExternalFileSystemMountPointProvider;
 class SandboxMountPointProvider;
 
 // TODO(kinuko): Probably this module must be called FileSystemPathUtil
 // or something similar.
 
 // An interface to construct or crack sandboxed filesystem paths.
 // Currently each sandboxed filesystem path looks like:
 //
 //   <profile_dir>/FileSystem/<origin_identifier>/<type>/chrome-<unique>/...
 //
@@ skipping 40 matching lines @@
   bool IsAllowedScheme(const GURL& url) const;
 
   // Returns the string for the given |type|.
   // Returns an empty string if the |type| is invalid.
   static std::string GetFileSystemTypeString(fileapi::FileSystemType type);
 
   // Checks if a given |name| contains any restricted names/chars in it.
   bool IsRestrictedFileName(FileSystemType type,
                             const FilePath& filename);
 
-  // Checks if an origin has access to a particular filesystem type.
-  bool IsAllowedFileSystemType(GURL origin, FileSystemType type);
+  // Checks if an origin has access to a particular filesystem type and
+  // file element represented by |virtual_path|.
+  bool IsAccessAllowed(const GURL& origin, FileSystemType type,
+                       const FilePath& virtual_path);
 
   SandboxMountPointProvider* sandbox_provider() const {
     return sandbox_provider_.get();
   }
 
+  ExternalFileSystemMountPointProvider* external_provider() const {
+    return external_provider_.get();
+  }
+
   bool is_incognito() const {
     return is_incognito_;
   }
 
  private:
   const bool is_incognito_;
   const bool allow_file_access_from_files_;
   scoped_ptr<SandboxMountPointProvider> sandbox_provider_;
-  scoped_ptr<FileSystemMountPointProvider> local_provider_;
+  scoped_ptr<ExternalFileSystemMountPointProvider> external_provider_;
 
   DISALLOW_COPY_AND_ASSIGN(FileSystemPathManager);
 };
 
 }  // namespace fileapi
 
 #endif  // WEBKIT_FILEAPI_FILE_SYSTEM_PATH_MANAGER_H_