Add logic to block the use of client 3D APIs (WebGL, Pepper 3D) if context lost notifications are r…

content/public/browser/gpu_data_manager.h

Index: content/public/browser/gpu_data_manager.h
diff --git a/content/public/browser/gpu_data_manager.h b/content/public/browser/gpu_data_manager.h
index 8bcea35b0533dd707566da30ee0e1f9e2ba66d40..da84a23f3e398107adfe88f56c328cae7d51ab08 100644
--- a/content/public/browser/gpu_data_manager.h
+++ b/content/public/browser/gpu_data_manager.h
@@ -12,6 +12,7 @@
 #include "content/public/common/gpu_switching_option.h"
 
 class FilePath;
+class GURL;
 
 namespace base {
 class ListValue;
@@ -25,6 +26,24 @@ struct GPUInfo;
 // This class is fully thread-safe.
 class GpuDataManager {
  public:
+  // Indicates the guilt level of a domain which caused a GPU reset.
+  // If a domain is 100% known to be guilty of resetting the GPU, then
+  // it will generally not cause other domains' use of 3D APIs to be
+  // blocked, unless system stability would be compromised.
+  enum DomainGuilt {
+    kKnownGuilty,

[jam, 2012/11/14 18:21:57]

nit: here and below, please use chrome recommended style for enum values, i.e.
DOMAIN_GUILT_KNOWN, DOMAIN_BLOCK_STATUS_BLOCKED..

also, it's hard for content-api reviewers to review these changes without seeing
the chrome side. why are they not together? i.e. why is the test in chrome, if
it were in content (which it seems that it should, since content code should be
tested in content) then the ForTesting method can be hidden

[Ken Russell (switch to Gerrit), 2012/11/14 19:09:14]

Will change -- sorry, I'd missed this in the Chromium style guide.
I wanted to split off this patch to avoid having one gigantic patch to review.
The chrome side will be large enough as it is. The tests currently must live in
chrome because they cause infobars to be raised. Some other preexisting
chrome-side tests (gpu_crash_browsertest.cc) now need to suppress the raising of
infobars which is why the ForTesting method is needed.

+    kUnknownGuilt
+  };
+
+  // Indicates the reason that access to a given client API (like
+  // WebGL or Pepper 3D) was blocked or not. This state is distinct
+  // from blacklisting of an entire feature.
+  enum DomainBlockStatus {
+    kDomainBlocked,
+    kAllDomainsBlocked,
+    kNotBlocked
+  };
+
   // Getter for the singleton.
   CONTENT_EXPORT static GpuDataManager* GetInstance();
 
@@ -84,6 +103,21 @@ class GpuDataManager {
   virtual void SetWindowCount(uint32 count) = 0;
   virtual uint32 GetWindowCount() const = 0;
 
+  // Maintenance of domains requiring explicit user permission before
+  // using client-facing 3D APIs (WebGL, Pepper 3D), either because
+  // the domain has caused the GPU to reset, or because too many GPU
+  // resets have been observed globally recently, and system stability
+  // might be compromised.
+  //
+  // The given URL may be a partial URL (including at least the host)
+  // or a full URL to a page.
+  virtual void BlockDomainFrom3DAPIs(const GURL& url, DomainGuilt guilt) = 0;
+  virtual DomainBlockStatus Are3DAPIsBlocked(
+      const GURL& url) const = 0;
+  virtual void UnblockDomainFrom3DAPIs(const GURL& url) = 0;
+  // Disables domain blocking. For use only in tests.
+  virtual void DisableDomainBlockingFor3DAPIsForTesting() = 0;
+
  protected:
   virtual ~GpuDataManager() {}
 };