Remove "open in new tab" items from context menu if the process doesn't

content/browser/child_process_security_policy.cc

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "content/browser/child_process_security_policy.h"
 
 #include "base/file_path.h"
 #include "base/logging.h"
 #include "base/metrics/histogram.h"
 #include "base/platform_file.h"
@@ skipping 60 matching lines @@
   }
 
   void RevokeReadRawCookies() {
     can_read_raw_cookies_ = false;
   }
 
   // Determine whether permission has been granted to request url.
   // Schemes that have not been granted default to being denied.
   bool CanRequestURL(const GURL& url) {
     SchemeMap::const_iterator judgment(scheme_policy_.find(url.scheme()));
-
     if (judgment == scheme_policy_.end())
       return false;  // Unmentioned schemes are disallowed.
 
     return judgment->second;
   }
 
   // Determine if the certain permissions have been granted to a file.
   bool HasPermissionsForFile(const FilePath& file, int permissions) {
     FilePath current_path = file.StripTrailingSeparators();
     FilePath last_path;
@@ skipping 260 matching lines @@
     int child_id, const GURL& url) {
   if (!url.is_valid())
     return false;  // Can't request invalid URLs.
 
   if (IsDisabledScheme(url.scheme()))
     return false; // The scheme is disabled by policy.
 
   if (IsWebSafeScheme(url.scheme()))
     return true;  // The scheme has been white-listed for every child process.
 
-  if (IsPseudoScheme(url.scheme())) {
-    // There are a number of special cases for pseudo schemes.
+  // There are a number of special cases for pseudo-schemes.
+  if (url.SchemeIs(chrome::kViewSourceScheme)) {
+    // A view-source URL is allowed if the child process is permitted to
+    // request the embedded URL. Careful to avoid pointless recursion.
+    GURL child_url(url.path());
+    if (child_url.SchemeIs(chrome::kViewSourceScheme) &&
+        url.SchemeIs(chrome::kViewSourceScheme))
+      return false;
 
-    if (url.SchemeIs(chrome::kViewSourceScheme)) {
-      // A view-source URL is allowed if the child process is permitted to
-      // request the embedded URL. Careful to avoid pointless recursion.
-      GURL child_url(url.path());
-      if (child_url.SchemeIs(chrome::kViewSourceScheme) &&
-          url.SchemeIs(chrome::kViewSourceScheme))
-          return false;
+    return CanRequestURL(child_id, child_url);
+  }
 
-      return CanRequestURL(child_id, child_url);
-    }
+  if (url.SchemeIs(chrome::kAboutScheme)) {
+    // Every child process can request <about:blank> but URLs like
+    // <about:memory> and <about:crash> shouldn't be requestable by any
+    // child process.
+    return LowerCaseEqualsASCII(url.spec(), chrome::kAboutBlankURL);
+  }
 
-    if (LowerCaseEqualsASCII(url.spec(), chrome::kAboutBlankURL))
-      return true;  // Every child process can request <about:blank>.
-
-    // URLs like <about:memory> and <about:crash> shouldn't be requestable by
-    // any child process.  Also, this case covers <javascript:...>, which should
-    // be handled internally by the process and not kicked up to the browser.
+  if (url.SchemeIs(chrome::kJavaScriptScheme)) {
+    // The <javascript:...> case should be handled internally by the process
+    // and not kicked up to the browser.
     return false;
   }
 
-  if (!net::URLRequest::IsHandledURL(url))
+  if (!IsPseudoScheme(url.scheme()) && !net::URLRequest::IsHandledURL(url))
     return true;  // This URL request is destined for ShellExecute.
 
   {
     base::AutoLock lock(lock_);
 
     SecurityStateMap::iterator state = security_state_.find(child_id);
     if (state == security_state_.end())
       return false;
 
     // Otherwise, we consult the child process's security state to see if it is
@@ skipping 79 matching lines @@
 
 void ChildProcessSecurityPolicy::LockToOrigin(int child_id, const GURL& gurl) {
   // "gurl" can be currently empty in some cases, such as file://blah.
   DCHECK(SiteInstance::GetSiteForURL(NULL, gurl) == gurl);
   base::AutoLock lock(lock_);
   SecurityStateMap::iterator state = security_state_.find(child_id);
   DCHECK(state != security_state_.end());
   state->second->LockToOrigin(gurl);
 }