Move socket API restriction check to browser process

content/browser/renderer_host/pepper_message_filter.h

Index: content/browser/renderer_host/pepper_message_filter.h
diff --git a/content/browser/renderer_host/pepper_message_filter.h b/content/browser/renderer_host/pepper_message_filter.h
index e55a5237b351fa3ff5becd7158086197984b3244..08aaa20baf8c40332655b8ca644d75d5e0c63881 100644
--- a/content/browser/renderer_host/pepper_message_filter.h
+++ b/content/browser/renderer_host/pepper_message_filter.h
@@ -40,7 +40,8 @@ class HostResolver;
 // handle requests that out-of-process plugins send directly to the browser.
 class PepperMessageFilter : public content::BrowserMessageFilter {
  public:
-  explicit PepperMessageFilter(content::ResourceContext* resource_context);
+  PepperMessageFilter(int process_id,
+                      content::ResourceContext* resource_context);
   explicit PepperMessageFilter(net::HostResolver* host_resolver);
   virtual ~PepperMessageFilter();
 
@@ -115,12 +116,41 @@ class PepperMessageFilter : public content::BrowserMessageFilter {
                    const PP_NetAddress_Private& addr);
   void OnUDPClose(uint32 socket_id);
 
+  void CheckTCPConnect(int routing_id,
+                       uint32 socket_id,
+                       const std::string& host,
+                       uint16_t port);
+  void DoTCPConnect(bool allowed,
+                    uint32 socket_id,
+                    const std::string& host,
+                    uint16_t port);
+
+  void CheckTCPConnectWithNetAddress(int routing_id,
+                                     uint32 socket_id,
+                                     const PP_NetAddress_Private& net_addr);
+  void DoTCPConnectWithNetAddress(bool allowed,
+                                  uint32 socket_id,
+                                  const PP_NetAddress_Private& net_addr);
+
+  void CheckUDPBind(int routing_id,
+                    uint32 socket_id,
+                    const PP_NetAddress_Private& addr);
+  void DoUDPBind(bool allowed,
+                 uint32 socket_id,
+                 const PP_NetAddress_Private& addr);
+
   // Callback when the font list has been retrieved on a background thread.
   void GetFontFamiliesComplete(IPC::Message* reply_msg,
                                scoped_refptr<content::FontListResult> result);
 
   uint32 GenerateSocketID();
 
+  // Return true if render with given ID can use socket APIs.
+  bool CanUseSocketAPIs(int32 render_id);
+
+  // Render process ID.
+  int process_id_;
+
   // When non-NULL, this should be used instead of the host_resolver_.
   content::ResourceContext* const resource_context_;