File API changes needed for safely passing user selected file entities from the file browser comp...

webkit/fileapi/sandbox_mount_point_provider.h

Index: webkit/fileapi/sandbox_mount_point_provider.h
===================================================================
--- webkit/fileapi/sandbox_mount_point_provider.h	(revision 81576)
+++ webkit/fileapi/sandbox_mount_point_provider.h	(working copy)
@@ -6,6 +6,7 @@
 #define WEBKIT_FILEAPI_SANDBOX_MOUNT_POINT_PROVIDER_H_
 
 #include <string>
+#include <vector>
 
 #include "base/file_path.h"
 #include "googleurl/src/gurl.h"
@@ -28,8 +29,9 @@
       const FilePath& profile_path);
   virtual ~SandboxMountPointProvider();
 
-  // Checks if mount point access is allowed from |origin_url|.
-  virtual bool IsAccessAllowed(const GURL& origin_url);
+  // Checks if access to |virtual_path| is allowed from |origin_url|.
+  virtual bool IsAccessAllowed(const GURL& origin_url,
+                               const FilePath& virtual_path);
 
   // Retrieves the root path for the given |origin_url| and |type|, and
   // calls the given |callback| with the root path and name.
@@ -53,6 +55,7 @@
 
   static const char kPersistentName[];
   static const char kTemporaryName[];
+  static const char kExternalName[];
 
   const FilePath& base_path() const {
     return base_path_;
@@ -61,6 +64,8 @@
   // Checks if a given |name| contains any restricted names/chars in it.
   virtual bool IsRestrictedFileName(const FilePath& filename) const;
 
+  virtual std::vector<FilePath> GetRootDirectories() const;
+
   // Returns the origin identifier string, which is used as a part of the
   // sandboxed path component, for the given |url|.
   static std::string GetOriginIdentifierFromURL(const GURL& url);