| Index: webkit/fileapi/sandbox_mount_point_provider.cc
|
| diff --git a/webkit/fileapi/sandbox_mount_point_provider.cc b/webkit/fileapi/sandbox_mount_point_provider.cc
|
| index 8ffd14421a23144a464e2d87f40a90aef0ab319f..0ed81b493e24e375c226d77c14421e498bff5062 100644
|
| --- a/webkit/fileapi/sandbox_mount_point_provider.cc
|
| +++ b/webkit/fileapi/sandbox_mount_point_provider.cc
|
| @@ -255,11 +255,13 @@ FileSystemFileUtil* SandboxMountPointProvider::GetFileUtil(
|
| return sandbox_file_util_.get();
|
| }
|
|
|
| -FilePath SandboxMountPointProvider::GetPathForPermissionsCheck(
|
| - const FilePath& virtual_path) const {
|
| - // Sandbox provider shouldn't directly grant permissions for its
|
| - // data directory.
|
| - return FilePath();
|
| +FilePermissionPolicy SandboxMountPointProvider::GetPermissionPolicy(
|
| + const FileSystemURL& url, int permissions) const {
|
| + // Access to the sandbox directory (and only to the directory) should be
|
| + // always allowed.
|
| + CHECK(CanHandleType(url.type()));
|
| + CHECK(!url.path().ReferencesParent());
|
| + return FILE_PERMISSION_ALWAYS_ALLOW;
|
| }
|
|
|
| FileSystemOperation* SandboxMountPointProvider::CreateFileSystemOperation(
|
|
|