Treat files downloaded from the address bar as "always safe" (including extensions per discussion...

chrome/browser/extensions/extension_webnavigation_api.cc

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // Implements the Chrome Extensions WebNavigation API.
 
 #include "chrome/browser/extensions/extension_webnavigation_api.h"
 
 #include "base/json/json_writer.h"
 #include "base/lazy_instance.h"
@@ skipping 90 matching lines @@
   dict->SetInteger(keys::kFrameIdKey, GetFrameId(is_main_frame, frame_id));
   dict->SetString(keys::kTransitionTypeKey,
                   PageTransition::CoreTransitionString(transition_type));
   ListValue* qualifiers = new ListValue();
   if (transition_type & PageTransition::CLIENT_REDIRECT)
     qualifiers->Append(Value::CreateStringValue("client_redirect"));
   if (transition_type & PageTransition::SERVER_REDIRECT)
     qualifiers->Append(Value::CreateStringValue("server_redirect"));
   if (transition_type & PageTransition::FORWARD_BACK)
     qualifiers->Append(Value::CreateStringValue("forward_back"));
+  if (transition_type & PageTransition::FROM_ADDRESS_BAR)
+    qualifiers->Append(Value::CreateStringValue("from_address_bar"));

[Matt Perry, 2011/08/18 00:22:40]

This changes the API. It seems like a reasonable change, but can you add it to
the API definition here:
http://www.google.com/codesearch#OAMlx_jo-ck/src/chrome/common/extensions/api...

[Peter Kasting, 2011/08/18 00:53:39]

Sure, will be in next revision.

   dict->Set(keys::kTransitionQualifiersKey, qualifiers);
   dict->SetDouble(keys::kTimeStampKey, MilliSecondsFromTime(base::Time::Now()));
   args.Append(dict);
 
   std::string json_args;
   base::JSONWriter::Write(&args, false, &json_args);
   DispatchEvent(tab_contents->browser_context(), keys::kOnCommitted, json_args);
 }
 
 // Constructs and dispatches an onDOMContentLoaded event.
@@ skipping 503 matching lines @@
   DictionaryValue* resultDict = new DictionaryValue();
   resultDict->SetString(
       keys::kUrlKey,
       frame_navigation_state.GetUrl(frame_id).spec());
   resultDict->SetBoolean(
       keys::kErrorOccurredKey,
       frame_navigation_state.GetErrorOccurredInFrame(frame_id));
   result_.reset(resultDict);
   return true;
 }