Fix for "chrome://" links in PDFs.

content/public/browser/child_process_security_policy.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CONTENT_PUBLIC_BROWSER_CHILD_PROCESS_SECURITY_POLICY_H_
 #define CONTENT_PUBLIC_BROWSER_CHILD_PROCESS_SECURITY_POLICY_H_
 
 #include <string>
 
 #include "base/basictypes.h"
@@ skipping 113 matching lines @@
   // Grants permission to delete from filesystem |filesystem_id|. 'delete-from'
   // is used to allow deleting files into the destination filesystem without
   // granting more general create and write permissions.
   virtual void GrantDeleteFromFileSystem(int child_id,
                                          const std::string& filesystem_id) = 0;
 
   // Grants the child process the capability to access URLs of the provided
   // scheme.
   virtual void GrantScheme(int child_id, const std::string& scheme) = 0;
 
+  // Grants the child process the capability to access URLs with both the
+  // provided scheme and host.

[Charlie Reis, 2015/09/22 17:38:15]

Maybe we should be using url::Origins here, rather than pairs of strings?  (GURL
is also an option, but I'd prefer not to allow granting of individual URLs with
paths unless we need to.)

On that note, perhaps it should be called GrantOrigin.

[paulmeyer, 2015/09/22 22:13:57]

Done and done.

[Charlie Reis, 2015/09/23 00:07:15]

Please use url::Origins rather than strings (same in the impl file).

[paulmeyer, 2015/09/23 17:03:54]

Sorry, I misunderstood. Now using url::Origin.

+  virtual void GrantSchemeHost(int child_id, const std::string& scheme,
+                               const std::string& host) = 0;

[Charlie Reis, 2015/09/22 17:38:15]

Same style nit.

[paulmeyer, 2015/09/22 22:13:57]

Done.

+
   // Returns true if read access has been granted to |filesystem_id|.
   virtual bool CanReadFileSystem(int child_id,
                                  const std::string& filesystem_id) = 0;
 
   // Returns true if read and write access has been granted to |filesystem_id|.
   virtual bool CanReadWriteFileSystem(int child_id,
                                       const std::string& filesystem_id) = 0;
 
   // Returns true if copy-into access has been granted to |filesystem_id|.
   virtual bool CanCopyIntoFileSystem(int child_id,
@@ skipping 14 matching lines @@
   // Returns true if the process is permitted to read and modify the data for
   // the given origin. This is currently used for cookies and passwords.
   // Does not affect cookies attached to or set by network requests.
   // Only might return false if the --site-per-process flag is used.
   virtual bool CanAccessDataForOrigin(int child_id, const GURL& gurl) = 0;
 };
 
 }  // namespace content
 
 #endif  // CONTENT_PUBLIC_BROWSER_CHILD_PROCESS_SECURITY_POLICY_H_