Chromium Code Reviews| OLD | NEW |
|---|---|
| 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #include "webkit/fileapi/sandbox_mount_point_provider.h" | 5 #include "webkit/fileapi/sandbox_mount_point_provider.h" |
| 6 | 6 |
| 7 #include "base/bind.h" | 7 #include "base/bind.h" |
| 8 #include "base/command_line.h" | 8 #include "base/command_line.h" |
| 9 #include "base/logging.h" | 9 #include "base/logging.h" |
| 10 #include "base/memory/scoped_ptr.h" | 10 #include "base/memory/scoped_ptr.h" |
| (...skipping 617 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... | |
| 628 return FilePath(); | 628 return FilePath(); |
| 629 | 629 |
| 630 return root; | 630 return root; |
| 631 } | 631 } |
| 632 | 632 |
| 633 bool SandboxMountPointProvider::IsAllowedScheme(const GURL& url) const { | 633 bool SandboxMountPointProvider::IsAllowedScheme(const GURL& url) const { |
| 634 // Basically we only accept http or https. We allow file:// URLs | 634 // Basically we only accept http or https. We allow file:// URLs |
| 635 // only if --allow-file-access-from-files flag is given. | 635 // only if --allow-file-access-from-files flag is given. |
| 636 if (url.SchemeIs("http") || url.SchemeIs("https")) | 636 if (url.SchemeIs("http") || url.SchemeIs("https")) |
| 637 return true; | 637 return true; |
| 638 if (url.SchemeIsFileSystem()) | |
| 639 return url.inner_url() && IsAllowedScheme(*url.inner_url()); | |
|
abarth-chromium
2012/02/15 08:43:20
I wonder if places like this should be able to che
ericu
2012/02/15 22:48:09
Eventually, probably...once we decide what all we
| |
| 640 | |
| 638 for (size_t i = 0; | 641 for (size_t i = 0; |
| 639 i < file_system_options_.additional_allowed_schemes().size(); | 642 i < file_system_options_.additional_allowed_schemes().size(); |
| 640 ++i) { | 643 ++i) { |
| 641 if (url.SchemeIs( | 644 if (url.SchemeIs( |
| 642 file_system_options_.additional_allowed_schemes()[i].c_str())) | 645 file_system_options_.additional_allowed_schemes()[i].c_str())) |
| 643 return true; | 646 return true; |
| 644 } | 647 } |
| 645 return false; | 648 return false; |
| 646 } | 649 } |
| 647 | 650 |
| 648 } // namespace fileapi | 651 } // namespace fileapi |
| OLD | NEW |