Web MIDI API: reject sysex permissions on non-secure schemes

chrome/browser/content_settings/permission_context_base.cc

Index: chrome/browser/content_settings/permission_context_base.cc
diff --git a/chrome/browser/content_settings/permission_context_base.cc b/chrome/browser/content_settings/permission_context_base.cc
index 8868965621f48d828be8e6e27fc5847e524ba4ba..a170c6c3da5d34d0d2a7247f596c6017b9c6454e 100644
--- a/chrome/browser/content_settings/permission_context_base.cc
+++ b/chrome/browser/content_settings/permission_context_base.cc
@@ -104,6 +104,14 @@ void PermissionContextBase::DecidePermission(
     return;
   }
 
+  // Web MIDI API does not allow any permissions for non secure schemes.

[markusheintz_, 2015/03/30 09:27:23]

The Web MIDI API is not available for origin with non secure schemes. Access to
the MIDI API is blocked.

[Takashi Toyoshima, 2015/03/30 09:47:26]

Done.

+  if (permission_type_ == CONTENT_SETTINGS_TYPE_MIDI_SYSEX &&
+      !requesting_origin.SchemeIsSecure()) {
+    NotifyPermissionSet(id, requesting_origin, embedding_origin, callback,
+                        false /* persist */, CONTENT_SETTING_BLOCK);
+    return;
+  }
+
   ContentSetting content_setting =
       profile_->GetHostContentSettingsMap()
           ->GetContentSettingAndMaybeUpdateLastUsage(