Adds a field trial to control Web API kill switches.

chrome/browser/permissions/permission_context_base.cc

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/permissions/permission_context_base.h"
 
 #include "base/logging.h"
 #include "base/prefs/pref_service.h"
 #include "chrome/browser/content_settings/host_content_settings_map_factory.h"
 #include "chrome/browser/permissions/permission_bubble_request_impl.h"
 #include "chrome/browser/permissions/permission_context_uma_util.h"
 #include "chrome/browser/permissions/permission_queue_controller.h"
 #include "chrome/browser/permissions/permission_request_id.h"
+#include "chrome/browser/permissions/permission_util.h"
 #include "chrome/browser/profiles/profile.h"
 #include "chrome/browser/ui/website_settings/permission_bubble_manager.h"
 #include "chrome/common/pref_names.h"
 #include "components/content_settings/core/browser/host_content_settings_map.h"
 #include "components/content_settings/core/browser/website_settings_registry.h"
+#include "components/variations/variations_associated_data.h"
 #include "content/public/browser/browser_thread.h"
 #include "content/public/browser/web_contents.h"
 #include "content/public/common/origin_util.h"
 
+// static
+const char PermissionContextBase::kPermissionsKillSwitchFieldStudy[] =
+    "PermissionsKillSwitch";
+// static
+const char PermissionContextBase::kPermissionsKillSwitchBlockedValue[] =
+    "blocked";
+
 PermissionContextBase::PermissionContextBase(
     Profile* profile,
     const ContentSettingsType permission_type)
     : profile_(profile),
       permission_type_(permission_type),
       weak_factory_(this) {
   permission_queue_controller_.reset(
       new PermissionQueueController(profile_, permission_type_));
 }
 
 PermissionContextBase::~PermissionContextBase() {
   DCHECK_CURRENTLY_ON(content::BrowserThread::UI);
 }
 
 void PermissionContextBase::RequestPermission(
     content::WebContents* web_contents,
     const PermissionRequestID& id,
     const GURL& requesting_frame,
     bool user_gesture,
     const BrowserPermissionCallback& callback) {
   DCHECK_CURRENTLY_ON(content::BrowserThread::UI);
 
+  // First check if this permission has been disabled through Finch.

[Bernhard Bauer, 2015/10/21 10:29:03]

s/ through Finch/ if you plan on controlling this via a different mechanism in
the future, otherwise the comment will just rot.

(Also, don't use the term "Finch" in code, as it's a -- not particularly secret,
but still internal -- code name. The public name is "field trials".

[kcarattini, 2015/10/26 00:30:59]

Done.

+  if (IsPermissionKillSwitchOn()) {
+    // The kill switch is enabled for this permission; Block all requests.
+    NotifyPermissionSet(id, requesting_frame.GetOrigin(),
+        web_contents->GetLastCommittedURL().GetOrigin(), callback,
+        false /* persist */, CONTENT_SETTING_BLOCK);
+    return;
+  }
+
   DecidePermission(web_contents,
                    id,
                    requesting_frame.GetOrigin(),
                    web_contents->GetLastCommittedURL().GetOrigin(),
                    user_gesture,
                    callback);
 }
 
 ContentSetting PermissionContextBase::GetPermissionStatus(
     const GURL& requesting_origin,
     const GURL& embedding_origin) const {
+
+  // If the permission has been disabled through Finch, block all requests.
+  if (IsPermissionKillSwitchOn())
+    return CONTENT_SETTING_BLOCK;
+
   if (IsRestrictedToSecureOrigins() &&
       !content::IsOriginSecure(requesting_origin)) {
     return CONTENT_SETTING_BLOCK;
   }
 
   return HostContentSettingsMapFactory::GetForProfile(profile_)
       ->GetContentSetting(requesting_origin,
                           embedding_origin,
                           permission_type_,
                           std::string());
@@ skipping 183 matching lines @@
   DCHECK_EQ(requesting_origin, requesting_origin.GetOrigin());
   DCHECK_EQ(embedding_origin, embedding_origin.GetOrigin());
   DCHECK(content_setting == CONTENT_SETTING_ALLOW ||
          content_setting == CONTENT_SETTING_BLOCK);
 
   HostContentSettingsMapFactory::GetForProfile(profile_)->SetContentSetting(
       ContentSettingsPattern::FromURLNoWildcard(requesting_origin),
       ContentSettingsPattern::FromURLNoWildcard(embedding_origin),
       permission_type_, std::string(), content_setting);
 }
+
+bool PermissionContextBase::IsPermissionKillSwitchOn() const {
+  const std::string param =
+      variations::GetVariationParamValue(kPermissionsKillSwitchFieldStudy,
+          PermissionUtil::GetPermissionString(permission_type_));
+
+  return param == kPermissionsKillSwitchBlockedValue;
+}