chrome.displaySource custom bindings

extensions/renderer/resources/display_source_custom_bindings.js

+// Copyright 2015 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+// Custom binding for the Display Source API.
+
+var binding = require('binding').Binding.create('displaySource');
+var natives = requireNative('display_source');
+
+binding.registerCustomHook(function(bindingsAPI, extensionId) {
+  var apiFunctions = bindingsAPI.apiFunctions;
+  apiFunctions.setHandleRequest('startSession',
+      function(sessionInfo) {
+        natives.StartSession(sessionInfo);
+  });
+  apiFunctions.setHandleRequest('terminateSession',
+      function(session_id, callback) {
+        natives.TerminateSession(session_id, callback);
+  });
+});
+
+exports.binding = binding.generate();

[Devlin, 2015/12/01 17:48:37]

Drive-by.  This is a security bug.  Don't use exports.foo = foo, rather
exports.$set() (all other custom bindings should also be using this).