Implement $Secure- cookie prefix

chrome/browser/chrome_content_browser_client.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/chrome_content_browser_client.h"
 
 #include <map>
 #include <set>
 #include <utility>
 #include <vector>
@@ skipping 624 matching lines @@
   WebUSBPermissionProvider::Create(render_frame_host,
                                    mojo::GetProxy(&permission_provider));
   device::usb::DeviceManagerImpl::Create(permission_provider.Pass(),
                                          request.Pass());
 #endif  // !defined(OS_ANDROID) && !defined(OS_IOS)
 }
 
 }  // namespace
 
 ChromeContentBrowserClient::ChromeContentBrowserClient()
-    :
+    : experimental_web_platform_features_enabled_(
+          base::CommandLine::ForCurrentProcess()
+              ->HasSwitch(switches::kEnableExperimentalWebPlatformFeatures)),

[jochen (gone - plz use gerrit), 2015/10/12 09:31:41]

that's a content switch, you can just access it in content/ without the chrome
content browser client api

[estark, 2015/10/12 09:39:19]

That might be a little weird for non-chrome content embedders, though. For
non-chrome embedders, when the experimental flag is on, prefixes will always be
enforced for cookies set from the renderer, but not for cookies received over
the network. Do you think that's okay?

       weak_factory_(this) {
 #if defined(ENABLE_PLUGINS)
   for (size_t i = 0; i < arraysize(kPredefinedAllowedDevChannelOrigins); ++i)
     allowed_dev_channel_origins_.insert(kPredefinedAllowedDevChannelOrigins[i]);
   for (size_t i = 0; i < arraysize(kPredefinedAllowedFileHandleOrigins); ++i)
     allowed_file_handle_origins_.insert(kPredefinedAllowedFileHandleOrigins[i]);
   for (size_t i = 0; i < arraysize(kPredefinedAllowedSocketOrigins); ++i)
     allowed_socket_origins_.insert(kPredefinedAllowedSocketOrigins[i]);
 
   extra_parts_.push_back(new ChromeContentBrowserClientPluginsPart);
@@ skipping 2034 matching lines @@
   Profile* profile =
       Profile::FromBrowserContext(web_contents->GetBrowserContext());
   prerender::PrerenderManager* prerender_manager =
       prerender::PrerenderManagerFactory::GetForProfile(profile);
   if (prerender_manager &&
       prerender_manager->IsWebContentsPrerendering(web_contents, nullptr)) {
     *visibility_state = blink::WebPageVisibilityStatePrerender;
   }
 }
 
+bool ChromeContentBrowserClient::ExperimentalCookieFeaturesEnabled() {
+  return experimental_web_platform_features_enabled_;
+}
+
 #if defined(ENABLE_WEBRTC)
 void ChromeContentBrowserClient::MaybeCopyDisableWebRtcEncryptionSwitch(
     base::CommandLine* to_command_line,
     const base::CommandLine& from_command_line,
     version_info::Channel channel) {
 #if defined(OS_ANDROID)
   const version_info::Channel kMaxDisableEncryptionChannel =
       version_info::Channel::BETA;
 #else
   const version_info::Channel kMaxDisableEncryptionChannel =
       version_info::Channel::DEV;
 #endif
   if (channel <= kMaxDisableEncryptionChannel) {
     static const char* const kWebRtcDevSwitchNames[] = {
       switches::kDisableWebRtcEncryption,
     };
     to_command_line->CopySwitchesFrom(from_command_line,
                                       kWebRtcDevSwitchNames,
                                       arraysize(kWebRtcDevSwitchNames));
   }
 }
 #endif  // defined(ENABLE_WEBRTC)