File API changes needed for safely passing user selected file entities from the file browser comp...

webkit/fileapi/sandbox_mount_point_provider.h

Index: webkit/fileapi/sandbox_mount_point_provider.h
===================================================================
--- webkit/fileapi/sandbox_mount_point_provider.h	(revision 80841)
+++ webkit/fileapi/sandbox_mount_point_provider.h	(working copy)
@@ -6,6 +6,7 @@
 #define WEBKIT_FILEAPI_SANDBOX_MOUNT_POINT_PROVIDER_H_
 
 #include <string>
+#include <vector>
 
 #include "base/file_path.h"
 #include "googleurl/src/gurl.h"
@@ -28,8 +29,11 @@
       const FilePath& profile_path);
   virtual ~SandboxMountPointProvider();
 
-  // Checks if mount point access is allowed from |origin_url|.
-  virtual bool IsAccessAllowed(const GURL& origin_url);
+  // Checks if access to |virtual_path| is allowed from |origin_url|.
+  virtual bool IsAccessAllowed(const GURL& origin_url,
+                               const FilePath& virtual_path);
+  virtual void GrantAccess(const GURL& origin_url,
+                           const FilePath& virtual_path);

[michaeln, 2011/04/09 00:16:45]

is there a use case for revoking access?

[zel, 2011/04/13 00:44:26]

Not right now. All extension permissions are revoked when extension is unloaded
and that is already handled by ExtensionSpecialStoragePolicy.

 
   // Retrieves the root path for the given |origin_url| and |type|, and
   // calls the given |callback| with the root path and name.
@@ -61,6 +65,8 @@
   // Checks if a given |name| contains any restricted names/chars in it.
   virtual bool IsRestrictedFileName(const FilePath& filename) const;
 
+  virtual std::vector<FilePath> GetRootDirectories() const;
+
   // Returns the origin identifier string, which is used as a part of the
   // sandboxed path component, for the given |url|.
   static std::string GetOriginIdentifierFromURL(const GURL& url);