Add a centralized mechanism for whitelisting access to extension permissions.

chrome/browser/extensions/extension_web_socket_proxy_private_api.cc

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/extensions/extension_web_socket_proxy_private_api.h"
 
 #include "base/logging.h"
 #include "base/stl_util.h"
 #include "base/string_number_conversions.h"
 #include "base/values.h"
 #include "chrome/browser/browser_process.h"
 #include "chrome/browser/internal_auth.h"
 #include "chrome/browser/io_thread.h"
 #include "chrome/common/chrome_notification_types.h"
 #include "chrome/common/extensions/extension.h"
 #include "content/public/browser/browser_thread.h"
 #include "content/public/browser/notification_service.h"
 #include "content/public/browser/notification_details.h"
 #include "net/base/escape.h"
 #include "net/base/net_errors.h"
 #include "net/base/net_log.h"
 #include "net/base/net_util.h"
 #include "net/base/single_request_host_resolver.h"
 
 #if defined(OS_CHROMEOS)
 #include "chrome/browser/chromeos/web_socket_proxy_controller.h"
 #endif
 
-namespace {
-const char kPermissionDeniedError[] =
-    "Extension does not have permission to use this method.";
-}
-
 WebSocketProxyPrivate::WebSocketProxyPrivate()
     : port_(-1),
       listening_port_(-1),
       do_tls_(false),
       is_finalized_(false) {
 }
 
 WebSocketProxyPrivate::~WebSocketProxyPrivate() {
 }
 
@@ skipping 55 matching lines @@
 bool WebSocketProxyPrivate::RunImpl() {
   AddRef();
   result_.reset(Value::CreateStringValue(""));
 
 #if defined(OS_CHROMEOS)
   bool delay_response = false;
 
   EXTENSION_FUNCTION_VALIDATE(args_->GetString(0, &hostname_));
   EXTENSION_FUNCTION_VALIDATE(args_->GetInteger(1, &port_));
 
-  if (chromeos::WebSocketProxyController::CheckCredentials(
-          extension_id(), hostname_, port_,
-          do_tls_ ? chromeos::WebSocketProxyController::TLS_OVER_TCP :
-              chromeos::WebSocketProxyController::PLAIN_TCP)) {
-    listening_port_ = chromeos::WebSocketProxyController::GetPort();
-    if (listening_port_ < 1) {
-      delay_response = true;
-      registrar_.Add(
-          this, chrome::NOTIFICATION_WEB_SOCKET_PROXY_STARTED,
-          content::NotificationService::AllSources());
-    }
-    map_["hostname"] = hostname_;
-    map_["port"] = base::IntToString(port_);
-    map_["extension_id"] = extension_id();
-  } else {
-    error_ = kPermissionDeniedError;
-    return false;
+  listening_port_ = chromeos::WebSocketProxyController::GetPort();
+  if (listening_port_ < 1) {
+    delay_response = true;
+    registrar_.Add(
+        this, chrome::NOTIFICATION_WEB_SOCKET_PROXY_STARTED,
+        content::NotificationService::AllSources());
   }
+  map_["hostname"] = hostname_;
+  map_["port"] = base::IntToString(port_);
+  map_["extension_id"] = extension_id();
 
   if (delay_response) {
     const int kTimeout = 12;
     timer_.Start(FROM_HERE, base::TimeDelta::FromSeconds(kTimeout),
         this, &WebSocketProxyPrivate::ResolveHost);
   } else {
     ResolveHost();
   }
 #else
   Finalize();
@@ skipping 72 matching lines @@
 void WebSocketProxyPrivateGetPassportForTCPFunction::CustomFinalize() {
 #if defined(OS_CHROMEOS)
   std::string passport =
       browser::InternalAuthGeneration::GeneratePassport(
           "web_socket_proxy", map_) + std::string(":");
   if (ContainsKey(map_, "addr"))
     passport += map_["addr"];
   result_.reset(Value::CreateStringValue(passport));
 #endif
 }