Add content-security-policy (CSP) to chrome://flags.

chrome/browser/ui/webui/flags_ui.cc

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/ui/webui/flags_ui.h"
 
 #include <string>
 
 #include "base/memory/singleton.h"
 #include "base/utf_string_conversions.h"
 #include "base/values.h"
 #include "chrome/browser/about_flags.h"
 #include "chrome/browser/browser_process.h"
 #include "chrome/browser/prefs/pref_service.h"
 #include "chrome/browser/profiles/profile.h"
 #include "chrome/browser/ui/browser_list.h"
-#include "chrome/browser/ui/webui/chrome_url_data_manager.h"
+#include "chrome/browser/ui/webui/chrome_web_ui_data_source.h"
 #include "chrome/common/jstemplate_builder.h"
 #include "chrome/common/pref_names.h"
 #include "chrome/common/url_constants.h"
 #include "content/browser/browser_thread.h"
 #include "content/browser/tab_contents/tab_contents.h"
 #include "grit/browser_resources.h"
 #include "grit/chromium_strings.h"
 #include "grit/generated_resources.h"
 #include "grit/theme_resources.h"
 #include "ui/base/l10n/l10n_util.h"
 #include "ui/base/resource/resource_bundle.h"
 
 #if defined(OS_CHROMEOS)
 #include "chrome/browser/chromeos/user_cros_settings_provider.h"
 #include "chrome/browser/chromeos/login/user_manager.h"
 #endif
 
-namespace {
+static const char kFlagsJs[] = "flags.js";
+static const char kStringsJs[] = "strings.js";
 
 ///////////////////////////////////////////////////////////////////////////////
 //
 // FlagsUIHTMLSource
 //
 ///////////////////////////////////////////////////////////////////////////////
 
-class FlagsUIHTMLSource : public ChromeURLDataManager::DataSource {
+class FlagsUIHTMLSource : public ChromeWebUIDataSource {
  public:
-  FlagsUIHTMLSource()
-      : DataSource(chrome::kChromeUIFlagsHost, MessageLoop::current()) {}
+  FlagsUIHTMLSource();
 
   // Called when the network layer has requested a resource underneath
   // the path we registered.
   virtual void StartDataRequest(const std::string& path,
                                 bool is_incognito,
                                 int request_id);
-  virtual std::string GetMimeType(const std::string&) const {
-    return "text/html";
-  }
+  virtual std::string GetMimeType(const std::string&) const;
 
  private:
   ~FlagsUIHTMLSource() {}
-
   DISALLOW_COPY_AND_ASSIGN(FlagsUIHTMLSource);
 };
 
+FlagsUIHTMLSource::FlagsUIHTMLSource()
+    : ChromeWebUIDataSource(chrome::kChromeUIFlagsHost) {
+  AddLocalizedString("flagsLongTitle", IDS_FLAGS_LONG_TITLE);
+  AddLocalizedString("flagsTableTitle", IDS_FLAGS_TABLE_TITLE);
+  AddLocalizedString("flagsNoExperimentsAvailable",
+                     IDS_FLAGS_NO_EXPERIMENTS_AVAILABLE);
+  AddLocalizedString("flagsWarningHeader", IDS_FLAGS_WARNING_HEADER);
+  AddLocalizedString("flagsBlurb", IDS_FLAGS_WARNING_TEXT);
+#if defined(OS_CHROMEOS)
+  int ids = IDS_PRODUCT_OS_NAME;
+#else
+  int ids = IDS_PRODUCT_NAME;
+#endif
+  AddString("flagsRestartNotice",
+            l10n_util::GetStringFUTF16(IDS_FLAGS_RELAUNCH_NOTICE,
+                                       l10n_util::GetStringUTF16(ids)));
+  AddLocalizedString("flagsRestartButton", IDS_FLAGS_RELAUNCH_BUTTON);
+  AddLocalizedString("disable", IDS_FLAGS_DISABLE);
+  AddLocalizedString("enable", IDS_FLAGS_ENABLE);
+#if defined(OS_CHROMEOS)
+  // Set the strings to show which user can actually change the flags
+  AddLocalizedString("ownerOnly", IDS_OPTIONS_ACCOUNTS_OWNER_ONLY);
+  AddString("ownerUserId",
+            UTF8ToUTF16(chromeos::UserCrosSettingsProvider::cached_owner()));
+#endif
+}
+
 void FlagsUIHTMLSource::StartDataRequest(const std::string& path,
                                         bool is_incognito,
                                         int request_id) {
-  // Strings used in the JsTemplate file.
-  DictionaryValue localized_strings;
-  localized_strings.SetString("flagsLongTitle",
-      l10n_util::GetStringUTF16(IDS_FLAGS_LONG_TITLE));
-  localized_strings.SetString("flagsTableTitle",
-      l10n_util::GetStringUTF16(IDS_FLAGS_TABLE_TITLE));
-  localized_strings.SetString("flagsNoExperimentsAvailable",
-      l10n_util::GetStringUTF16(IDS_FLAGS_NO_EXPERIMENTS_AVAILABLE));
-  localized_strings.SetString("flagsWarningHeader", l10n_util::GetStringUTF16(
-      IDS_FLAGS_WARNING_HEADER));
-  localized_strings.SetString("flagsBlurb", l10n_util::GetStringUTF16(
-      IDS_FLAGS_WARNING_TEXT));
-  localized_strings.SetString("flagsRestartNotice", l10n_util::GetStringFUTF16(
-      IDS_FLAGS_RELAUNCH_NOTICE,
-      l10n_util::GetStringUTF16(
-#if defined(OS_CHROMEOS)
-          IDS_PRODUCT_OS_NAME
-#else
-          IDS_PRODUCT_NAME
+  if (path == kStringsJs) {
+    SendLocalizedStringsAsJSON(request_id);
+  } else {
+    int idr;
+    if (path == kFlagsJs)
+      idr = IDR_FLAGS_JS;
+#if defined (OS_CHROMEOS)
+    else if (!chromeos::UserManager::Get()->current_user_is_owner())
+      idr = IDR_FLAGS_HTML_WARNING;
 #endif
-          )));
-  localized_strings.SetString("flagsRestartButton",
-      l10n_util::GetStringUTF16(IDS_FLAGS_RELAUNCH_BUTTON));
-  localized_strings.SetString("disable",
-      l10n_util::GetStringUTF16(IDS_FLAGS_DISABLE));
-  localized_strings.SetString("enable",
-      l10n_util::GetStringUTF16(IDS_FLAGS_ENABLE));
+    else
+      idr = IDR_FLAGS_HTML;
 
-  base::StringPiece html =
-      ResourceBundle::GetSharedInstance().GetRawDataResource(IDR_FLAGS_HTML);
-#if defined (OS_CHROMEOS)
-  if (!chromeos::UserManager::Get()->current_user_is_owner()) {
-    html = ResourceBundle::GetSharedInstance().GetRawDataResource(
-        IDR_FLAGS_HTML_WARNING);
+    SendFromResourceBundle(request_id, idr);
+  }
+}
 
-    // Set the strings to show which user can actually change the flags
-    localized_strings.SetString("ownerOnly", l10n_util::GetStringUTF16(
-        IDS_OPTIONS_ACCOUNTS_OWNER_ONLY));
-    localized_strings.SetString("ownerUserId", UTF8ToUTF16(
-        chromeos::UserCrosSettingsProvider::cached_owner()));
-  }
-#endif
-  static const base::StringPiece flags_html(html);
-  ChromeURLDataManager::DataSource::SetFontAndTextDirection(&localized_strings);
+std::string FlagsUIHTMLSource::GetMimeType(const std::string& path) const {
+  if (path == kStringsJs || path == kFlagsJs)
+    return "application/javascript";
 
-  std::string full_html(flags_html.data(), flags_html.size());
-  jstemplate_builder::AppendJsonHtml(&localized_strings, &full_html);
-  jstemplate_builder::AppendI18nTemplateSourceHtml(&full_html);
-  jstemplate_builder::AppendI18nTemplateProcessHtml(&full_html);
-  jstemplate_builder::AppendJsTemplateSourceHtml(&full_html);
+  return "text/html";
+}
 
-  scoped_refptr<RefCountedBytes> html_bytes(new RefCountedBytes);
-  html_bytes->data.resize(full_html.size());
-  std::copy(full_html.begin(), full_html.end(), html_bytes->data.begin());
-
-  SendResponse(request_id, html_bytes);
-}
+namespace {
 
 ////////////////////////////////////////////////////////////////////////////////
 //
 // FlagsDOMHandler
 //
 ////////////////////////////////////////////////////////////////////////////////
 
 // The handler for Javascript messages for the about:flags page.
 class FlagsDOMHandler : public WebUIMessageHandler {
  public:
@@ skipping 87 matching lines @@
 // static
 RefCountedMemory* FlagsUI::GetFaviconResourceBytes() {
   return ResourceBundle::GetSharedInstance().
       LoadDataResourceBytes(IDR_FLAGS);
 }
 
 // static
 void FlagsUI::RegisterPrefs(PrefService* prefs) {
   prefs->RegisterListPref(prefs::kEnabledLabsExperiments);
 }