PPB_Flash.Navigate(): Disallow certain HTTP request headers.

chrome/renderer/pepper/pepper_flash_renderer_host.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CHROME_RENDERER_PEPPER_PEPPER_FLASH_RENDERER_HOST_H_
 #define CHROME_RENDERER_PEPPER_PEPPER_FLASH_RENDERER_HOST_H_
 
+#include <set>
 #include <string>
 #include <vector>
 
 #include "base/basictypes.h"
 #include "base/memory/weak_ptr.h"
 #include "ppapi/host/host_message_context.h"
 #include "ppapi/host/resource_host.h"
 
 struct PP_Rect;
 
@@ skipping 36 matching lines @@
                      const std::string& target,
                         bool from_user_action);
   int32_t OnIsRectTopmost(ppapi::host::HostMessageContext* host_context,
                           const PP_Rect& rect);
   int32_t OnInvokePrinting(ppapi::host::HostMessageContext* host_context);
 
   // A stack of ReplyMessageContexts to track Navigate() calls which have not
   // yet been replied to.
   std::vector<ppapi::host::ReplyMessageContext> navigate_replies_;
 
+  // A set of HTTP request headers allowed for Navigate().
+  std::set<std::string> allowed_headers_;
+
   content::RendererPpapiHost* host_;
   base::WeakPtrFactory<PepperFlashRendererHost> weak_factory_;
 
   DISALLOW_COPY_AND_ASSIGN(PepperFlashRendererHost);
 };
 
 #endif  // CHROME_RENDERER_PEPPER_PEPPER_FLASH_RENDERER_HOST_H_