Treat files downloaded from the address bar as "always safe" (including extensions per discussion...

chrome/browser/ui/browser_navigator.cc

Index: chrome/browser/ui/browser_navigator.cc
===================================================================
--- chrome/browser/ui/browser_navigator.cc	(revision 97032)
+++ chrome/browser/ui/browser_navigator.cc	(working copy)
@@ -367,8 +367,13 @@
   // inform the target TabContents, and we may need to update the UI.
   PageTransition::Type base_transition =
       PageTransition::StripQualifier(params->transition);
-  bool user_initiated = base_transition == PageTransition::TYPED ||
-                        base_transition == PageTransition::AUTO_BOOKMARK;
+  bool user_initiated = params->transition & PageTransition::FROM_ADDRESS_BAR ||

[sky, 2011/08/18 00:13:00]

How unlike you not to use () around all these.

+      base_transition == PageTransition::TYPED ||
+      base_transition == PageTransition::AUTO_BOOKMARK ||
+      base_transition == PageTransition::GENERATED ||
+      base_transition == PageTransition::START_PAGE ||

[sky, 2011/08/18 00:13:00]

How come you're adding START_PAGE here?

[Peter Kasting, 2011/08/18 00:53:39]

It seemed like starting the browser ought to qualify as something the user
intentionally did, and the start page shouldn't be DDoS restricted.  But maybe
this is inappropriate.  You're right that this bends the definition a bit.  I'm
not sure which way to go.

[sky, 2011/08/19 17:34:35]

Peter stopped by and we talked about START_PAGE. Since START_PAGE is typically
used when the user actually launches the app it seems fine to make it user
initiated.

+      base_transition == PageTransition::RELOAD ||
+      base_transition == PageTransition::KEYWORD;
 
   // Check if this is a singleton tab that already exists
   int singleton_index = GetIndexOfSingletonTab(params);