Whitelist experimental.storage as an unprivileged extension API.

chrome/common/extensions/api/extension_api.cc

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/common/extensions/api/extension_api.h"
 
 #include <string>
 #include <vector>
 
 #include "base/json/json_reader.h"
@@ skipping 25 matching lines @@
   CHECK(temp_value->IsType(base::Value::TYPE_LIST))
       << "Top-level node in extension API is not dictionary";
 
   value_.reset(static_cast<base::ListValue*>(temp_value.release()));
 }
 
 ExtensionAPI::~ExtensionAPI() {
 }
 
 bool ExtensionAPI::IsPrivileged(const std::string& full_name) const {
-  std::vector<std::string> name_space;
-  base::SplitString(full_name, '.', &name_space);
-  std::string name = name_space.back();
-  name_space.pop_back();
+  std::vector<std::string> split_full_name;
+  base::SplitString(full_name, '.', &split_full_name);
+  std::string name = split_full_name.back();
+  split_full_name.pop_back();
+  std::string name_space = JoinString(split_full_name, '.');
+
+  // HACK(kalman): explicitly mark all Storage API methods as unprivileged.
+  // TODO(kalman): solve this in a more general way; the problem is that
+  // functions-on-properties are not found with the following algorithm.
+  if (name_space == "experimental.storage")
+    return false;
 
   base::DictionaryValue* name_space_node =
-      FindListItem(value_.get(), "namespace", JoinString(name_space, '.'));
+      FindListItem(value_.get(), "namespace", name_space);
   if (!name_space_node)
     return true;
 
   if (!IsChildNamePrivileged(name_space_node, "functions", name) ||
       !IsChildNamePrivileged(name_space_node, "events", name)) {
     return false;
   }
 
   return true;
 }
@@ skipping 23 matching lines @@
 
   bool unprivileged = false;
   DictionaryValue* child = FindListItem(child_list, "name", child_name);
   if (!child || !child->GetBoolean("unprivileged", &unprivileged))
     return true;
 
   return !unprivileged;
 }
 
 }