Sanitize enclosing quotes around paths in policies.

chrome/browser/policy/policy_path_parser_win.cc

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include <shlobj.h>
 
 #include "chrome/browser/policy/policy_path_parser.h"
 
 #include "base/logging.h"
 #include "base/memory/scoped_ptr.h"
@@ skipping 26 matching lines @@
     { kWinLocalAppDataFolderVarName,   CSIDL_LOCAL_APPDATA},
     { kWinRoamingAppDataFolderVarName, CSIDL_APPDATA},
     { kWinDocumentsFolderVarName,      CSIDL_PERSONAL}
 };
 
 // Replaces all variable occurances in the policy string with the respective
 // system settings values.
 FilePath::StringType ExpandPathVariables(
     const FilePath::StringType& untranslated_string) {
   FilePath::StringType result(untranslated_string);
+  if (result.length() == 0)
+    return result;
+  // Sanitize quotes in case of any around the whole string.
+  if (result.length() > 1 &&
+      ((result[0] == L'"' && result[result.length() - 1] == L'"') ||
+       (result[0] == L'\'' && result[result.length() - 1] == L'\''))) {
+    // Strip first and last char which should be matching quotes now.
+    result = result.substr(1, result.length() - 2);
+  }
   // First translate all path variables we recognize.
   for (int i = 0; i < arraysize(win_folder_mapping); ++i) {
     size_t position = result.find(win_folder_mapping[i].name);
     if (position != std::wstring::npos) {
       WCHAR path[MAX_PATH];
       ::SHGetSpecialFolderPath(0, path, win_folder_mapping[i].id, false);
       std::wstring path_string(path);
       result.replace(position, wcslen(win_folder_mapping[i].name), path_string);
     }
   }
@@ skipping 21 matching lines @@
       result.replace(
           position, wcslen(kMachineNamePolicyVarName), machinename_string);
     }
   }
   return result;
 }
 
 }  // namespace path_parser
 
 }  // namespace policy