signin: force web signin flow initiated visits to accounts.google.com to their own process.

chrome/browser/ui/webui/sync_promo/sync_promo_ui.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CHROME_BROWSER_UI_WEBUI_SYNC_PROMO_SYNC_PROMO_UI_H_
 #define CHROME_BROWSER_UI_WEBUI_SYNC_PROMO_SYNC_PROMO_UI_H_
 
 #include "content/public/browser/web_ui_controller.h"
 
 class Profile;
@@ skipping 10 matching lines @@
     SOURCE_SETTINGS,
     SOURCE_EXTENSION_INSTALL_BUBBLE,
     SOURCE_WEBSTORE_INSTALL,
     SOURCE_APP_LAUNCHER,
     SOURCE_UNKNOWN, // This must be last.
   };
 
   // Constructs a SyncPromoUI.
   explicit SyncPromoUI(content::WebUI* web_ui);
 
+  // This is used to distinguish URLs belonging to the special web signin flow
+  // running in the special signin process from other URLs on the same domain.
+  // We do not grant WebUI privilieges / bindings to this process or to URLs of
+  // this scheme; enforcement of privileges is handled separately by
+  // OneClickSigninHelper.
+  static const char* kChromeSigninEffectiveURL;
+
   // Returns true if the sync promo should be visible.
   // |profile| is the profile of the tab the promo would be shown on.
   static bool ShouldShowSyncPromo(Profile* profile);
 
   // Returns true if we should show the sync promo at startup.
   static bool ShouldShowSyncPromoAtStartup(Profile* profile,
                                            bool is_new_profile);
 
   // Called when the sync promo has been shown so that we can keep track
   // of the number of times we've displayed it.
@@ skipping 31 matching lines @@
   static bool GetAutoCloseForSyncPromoURL(const GURL& url);
 
   // Returns true if chrome should use the web-based sign in flow, false if
   // chrome should use the ClientLogin flow.  This function will return true
   // only for platforms where |ENABLE_ONE_CLICK_SIGNIN| is defined.
   static bool UseWebBasedSigninFlow();
 
   // Forces UseWebBasedSigninFlow() to return true when set; used in tests only.
   static void ForceWebBasedSigninFlowForTesting(bool force);
 
+  // Returns true if |url| is a web signin URL and should be hosted in an
+  // isolated, privileged signin process.
+  static bool IsWebBasedSigninFlowURL(const GURL& url);
+
  private:
   DISALLOW_COPY_AND_ASSIGN(SyncPromoUI);
 };
 
 #endif  // CHROME_BROWSER_UI_WEBUI_SYNC_PROMO_SYNC_PROMO_UI_H_