Make --allow-cross-domain-auth-prompt equivalent to a preference.

content/browser/renderer_host/resource_dispatcher_host.h

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // This is the browser side of the resource dispatcher, it receives requests
 // from the child process (i.e. [Renderer, Plugin, Worker]ProcessHost), and
 // dispatches them to URLRequests. It then forwards the messages from the
 // URLRequests back to the correct process for handling.
 //
 // See http://dev.chromium.org/developers/design-documents/multi-process-resource-loading
@@ skipping 244 matching lines @@
   void UnregisterDownloadedTempFile(int child_id, int request_id);
 
   // Needed for the sync IPC message dispatcher macros.
   bool Send(IPC::Message* message);
 
   // Controls if we launch or squash prefetch requests as they arrive
   // from renderers.
   static bool is_prefetch_enabled();
   static void set_is_prefetch_enabled(bool value);
 
+  // Controls whether third-party sub-content can pop-up HTTP basic auth
+  // dialog boxes.
+  bool allow_cross_origin_auth_prompt();
+  void set_allow_cross_origin_auth_prompt(bool value);
+
   // This does not take ownership of the observer. It is expected that the
   // observer have a longer lifetime than the ResourceDispatcherHost.
   void set_observer(Observer* observer) { observer_ = observer; }
 
  private:
   FRIEND_TEST_ALL_PREFIXES(ResourceDispatcherHostTest,
                            TestBlockedRequestsProcessDies);
   FRIEND_TEST_ALL_PREFIXES(ResourceDispatcherHostTest,
                            IncrementOutstandingRequestsMemoryCost);
   FRIEND_TEST_ALL_PREFIXES(ResourceDispatcherHostTest,
@@ skipping 146 matching lines @@
                                                        int load_flags);
 
   // Sends the given notification on the UI thread.  The RenderViewHost's
   // controller is used as the source.
   template <class T>
   static void NotifyOnUI(NotificationType type,
                          int render_process_id,
                          int render_view_id,
                          T* detail);
 
+  // Relationship of resource being authenticated with the top level page.
+  enum HttpAuthResourceType {
+    HTTP_AUTH_RESOURCE_TOP,            // Top-level page itself
+    HTTP_AUTH_RESOURCE_SAME_DOMAIN,    // Sub-content from same domain
+    HTTP_AUTH_RESOURCE_BLOCKED_CROSS,  // Blocked Sub-content from cross domain
+    HTTP_AUTH_RESOURCE_ALLOWED_CROSS,  // Allowed Sub-content per command line
+    HTTP_AUTH_RESOURCE_LAST
+  };
+
+  HttpAuthResourceType HttpAuthResourceTypeOf(net::URLRequest* request);
+
   PendingRequestList pending_requests_;
 
   // Collection of temp files downloaded for child processes via
   // the download_to_file mechanism. We avoid deleting them until
   // the client no longer needs them.
   typedef std::map<int, scoped_refptr<webkit_blob::DeletableFileReference> >
       DeletableFilesMap;  // key is request id
   typedef std::map<int, DeletableFilesMap>
       RegisteredTempFiles;  // key is child process id
   RegisteredTempFiles registered_temp_files_;
@@ skipping 53 matching lines @@
   //       kAvgBytesPerOutstandingRequest)
   int max_outstanding_requests_cost_per_process_;
 
   // Used during IPC message dispatching so that the handlers can get a pointer
   // to the source of the message.
   ResourceMessageFilter* filter_;
 
   Observer* observer_;
 
   static bool is_prefetch_enabled_;
+  bool allow_cross_origin_auth_prompt_;
 
   DISALLOW_COPY_AND_ASSIGN(ResourceDispatcherHost);
 };
 
 #endif  // CONTENT_BROWSER_RENDERER_HOST_RESOURCE_DISPATCHER_HOST_H_