signin: force web signin flow initiated visits to accounts.google.com to their own process.

chrome/common/url_constants.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/common/url_constants.h"
 
 #include "googleurl/src/url_util.h"
 
 namespace chrome {
 
@@ skipping 501 matching lines @@
   kChromeUIPpapiFlashCrashURL,
   kChromeUIPpapiFlashHangURL
 };
 const int kNumberOfChromeDebugURLs =
     static_cast<int>(arraysize(kChromeDebugURLs));
 
 const char kExtensionResourceScheme[] = "chrome-extension-resource";
 
 const char kChromeSearchScheme[] = "chrome-search";
 
+// This is used to distinguish URLs belonging to the special web signin flow
+// running in the special signin process from other URLs on the same domain.
+// We do not grant WebUI privilieges / bindings to this process or to URLs of
+// this scheme; enforcement of privileges is handled separately by
+// OneClickSigninHelper.

[Charlie Reis, 2013/03/04 19:22:24]

Great comment.  Can you move it to the .h file?

[tim (not reviewing), 2013/03/04 23:40:19]

Done.

+const char kChromeSigninScheme[] = "chrome-signin";
+
 // Google SafeSearch query parameters.
 const char kSafeSearchSafeParameter[] = "safe=active";
 const char kSafeSearchSsuiParameter[] = "ssui=on";
 
 const char kMediaAccessLearnMoreUrl[] =
     "https://support.google.com/chrome/?p=ib_access_cam_mic";
 
 }  // namespace chrome