Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(30)

Side by Side Diff: content/browser/child_process_security_policy_impl.h

Issue 1212163007: Kill renderers for bad password forms in --site-per-process. (Closed) Base URL: https://chromium.googlesource.com/chromium/src.git@master
Patch Set: Created 5 years, 5 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch
OLDNEW
1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
2 // Use of this source code is governed by a BSD-style license that can be 2 // Use of this source code is governed by a BSD-style license that can be
3 // found in the LICENSE file. 3 // found in the LICENSE file.
4 4
5 #ifndef CONTENT_BROWSER_CHILD_PROCESS_SECURITY_POLICY_IMPL_H_ 5 #ifndef CONTENT_BROWSER_CHILD_PROCESS_SECURITY_POLICY_IMPL_H_
6 #define CONTENT_BROWSER_CHILD_PROCESS_SECURITY_POLICY_IMPL_H_ 6 #define CONTENT_BROWSER_CHILD_PROCESS_SECURITY_POLICY_IMPL_H_
7 7
8 8
9 #include <map> 9 #include <map>
10 #include <set> 10 #include <set>
(...skipping 56 matching lines...) Expand 10 before | Expand all | Expand 10 after
67 bool CanReadFileSystem(int child_id, 67 bool CanReadFileSystem(int child_id,
68 const std::string& filesystem_id) override; 68 const std::string& filesystem_id) override;
69 bool CanReadWriteFileSystem(int child_id, 69 bool CanReadWriteFileSystem(int child_id,
70 const std::string& filesystem_id) override; 70 const std::string& filesystem_id) override;
71 bool CanCopyIntoFileSystem(int child_id, 71 bool CanCopyIntoFileSystem(int child_id,
72 const std::string& filesystem_id) override; 72 const std::string& filesystem_id) override;
73 bool CanDeleteFromFileSystem(int child_id, 73 bool CanDeleteFromFileSystem(int child_id,
74 const std::string& filesystem_id) override; 74 const std::string& filesystem_id) override;
75 bool HasWebUIBindings(int child_id) override; 75 bool HasWebUIBindings(int child_id) override;
76 void GrantSendMidiSysExMessage(int child_id) override; 76 void GrantSendMidiSysExMessage(int child_id) override;
77 bool CanAccessDataForOrigin(int child_id, const GURL& url) override;
77 78
78 // Pseudo schemes are treated differently than other schemes because they 79 // Pseudo schemes are treated differently than other schemes because they
79 // cannot be requested like normal URLs. There is no mechanism for revoking 80 // cannot be requested like normal URLs. There is no mechanism for revoking
80 // pseudo schemes. 81 // pseudo schemes.
81 void RegisterPseudoScheme(const std::string& scheme); 82 void RegisterPseudoScheme(const std::string& scheme);
82 83
83 // Returns true iff |scheme| has been registered as pseudo scheme. 84 // Returns true iff |scheme| has been registered as pseudo scheme.
84 bool IsPseudoScheme(const std::string& scheme); 85 bool IsPseudoScheme(const std::string& scheme);
85 86
86 // Upon creation, child processes should register themselves by calling this 87 // Upon creation, child processes should register themselves by calling this
(...skipping 51 matching lines...) Expand 10 before | Expand all | Expand 10 after
138 bool CanCreateFileSystemFile(int child_id, const storage::FileSystemURL& url); 139 bool CanCreateFileSystemFile(int child_id, const storage::FileSystemURL& url);
139 bool CanCreateReadWriteFileSystemFile(int child_id, 140 bool CanCreateReadWriteFileSystemFile(int child_id,
140 const storage::FileSystemURL& url); 141 const storage::FileSystemURL& url);
141 bool CanCopyIntoFileSystemFile(int child_id, 142 bool CanCopyIntoFileSystemFile(int child_id,
142 const storage::FileSystemURL& url); 143 const storage::FileSystemURL& url);
143 bool CanDeleteFileSystemFile(int child_id, const storage::FileSystemURL& url); 144 bool CanDeleteFileSystemFile(int child_id, const storage::FileSystemURL& url);
144 145
145 // Returns true if the specified child_id has been granted ReadRawCookies. 146 // Returns true if the specified child_id has been granted ReadRawCookies.
146 bool CanReadRawCookies(int child_id); 147 bool CanReadRawCookies(int child_id);
147 148
148 // Returns true if the process is permitted to read and modify the cookies for
149 // the given origin. Does not affect cookies attached to or set by network
150 // requests.
151 // Only might return false if the --site-per-process flag is used.
152 bool CanAccessCookiesForOrigin(int child_id, const GURL& gurl);
153
154 // Sets the process as only permitted to use and see the cookies for the 149 // Sets the process as only permitted to use and see the cookies for the
155 // given origin. 150 // given origin.
156 // Origin lock is applied only if the --site-per-process flag is used. 151 // Origin lock is applied only if the --site-per-process flag is used.
157 void LockToOrigin(int child_id, const GURL& gurl); 152 void LockToOrigin(int child_id, const GURL& gurl);
158 153
159 // Register FileSystem type and permission policy which should be used 154 // Register FileSystem type and permission policy which should be used
160 // for the type. The |policy| must be a bitwise-or'd value of 155 // for the type. The |policy| must be a bitwise-or'd value of
161 // storage::FilePermissionPolicy. 156 // storage::FilePermissionPolicy.
162 void RegisterFileSystemPermissionPolicy(storage::FileSystemType type, 157 void RegisterFileSystemPermissionPolicy(storage::FileSystemType type,
163 int policy); 158 int policy);
(...skipping 87 matching lines...) Expand 10 before | Expand all | Expand 10 after
251 WorkerToMainProcessMap worker_map_; 246 WorkerToMainProcessMap worker_map_;
252 247
253 FileSystemPermissionPolicyMap file_system_policy_map_; 248 FileSystemPermissionPolicyMap file_system_policy_map_;
254 249
255 DISALLOW_COPY_AND_ASSIGN(ChildProcessSecurityPolicyImpl); 250 DISALLOW_COPY_AND_ASSIGN(ChildProcessSecurityPolicyImpl);
256 }; 251 };
257 252
258 } // namespace content 253 } // namespace content
259 254
260 #endif // CONTENT_BROWSER_CHILD_PROCESS_SECURITY_POLICY_IMPL_H_ 255 #endif // CONTENT_BROWSER_CHILD_PROCESS_SECURITY_POLICY_IMPL_H_
OLDNEW

Powered by Google App Engine
This is Rietveld 408576698