Allow whitelisted content scripts to be injected in WebViews.

extensions/renderer/user_script_set.cc

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "extensions/renderer/user_script_set.h"
 
 #include "base/memory/ref_counted.h"
 #include "content/public/common/url_constants.h"
 #include "content/public/renderer/render_thread.h"
 #include "extensions/common/extension.h"
 #include "extensions/common/extension_set.h"
+#include "extensions/common/extensions_client.h"
 #include "extensions/common/permissions/permissions_data.h"
 #include "extensions/renderer/extension_injection_host.h"
 #include "extensions/renderer/extensions_renderer_client.h"
 #include "extensions/renderer/injection_host.h"
 #include "extensions/renderer/script_context.h"
 #include "extensions/renderer/script_injection.h"
 #include "extensions/renderer/user_script_injector.h"
 #include "extensions/renderer/web_ui_injection_host.h"
 #include "third_party/WebKit/public/web/WebDocument.h"
 #include "third_party/WebKit/public/web/WebFrame.h"
@@ skipping 57 matching lines @@
         tab_id,
         run_location,
         document_url,
         false /* is_declarative */);
     if (injection.get())
       injections->push_back(injection.release());
   }
 }
 
 bool UserScriptSet::UpdateUserScripts(base::SharedMemoryHandle shared_memory,
-                                      const std::set<HostID>& changed_hosts) {
+                                      const std::set<HostID>& changed_hosts,
+                                      bool whitelisted_only) {
   bool only_inject_incognito =
       ExtensionsRendererClient::Get()->IsIncognitoProcess();
 
   // Create the shared memory object (read only).
   shared_memory_.reset(new base::SharedMemory(shared_memory, true));
   if (!shared_memory_.get())
     return false;
 
   // First get the size of the memory block.
   if (!shared_memory_->Map(sizeof(Pickle::Header)))
@@ skipping 33 matching lines @@
       const char* body = NULL;
       int body_length = 0;
       CHECK(iter.ReadData(&body, &body_length));
       script->css_scripts()[j].set_external_content(
           base::StringPiece(body, body_length));
     }
 
     if (only_inject_incognito && !script->is_incognito_enabled())
       continue;  // This script shouldn't run in an incognito tab.
 
+    if (whitelisted_only) {
+      const ExtensionsClient::ScriptingWhitelist& whitelist =
+          ExtensionsClient::Get()->GetScriptingWhitelist();
+      if (std::find(whitelist.begin(), whitelist.end(),
+                    script->extension_id()) == whitelist.end()) {
+        continue;
+      }
+    }
+
     scripts_.push_back(script.release());
   }
 
   FOR_EACH_OBSERVER(Observer,
                     observers_,
                     OnUserScriptsUpdated(changed_hosts, scripts_.get()));
   return true;
 }
 
 scoped_ptr<ScriptInjection> UserScriptSet::GetDeclarativeScriptInjection(
@@ skipping 76 matching lines @@
         injector.Pass(),
         web_frame->toWebLocalFrame(),
         injection_host.Pass(),
         run_location,
         tab_id));
   }
   return injection.Pass();
 }
 
 }  // namespace extensions