Harden the implementation of '--disable-web-security'

third_party/WebKit/public/platform/Platform.h

 /*
  * Copyright (C) 2012 Google Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions are
  * met:
  *
  *     * Redistributions of source code must retain the above copyright
  * notice, this list of conditions and the following disclaimer.
  *     * Redistributions in binary form must reproduce the above
@@ skipping 394 matching lines @@
     virtual WebScrollbarBehavior* scrollbarBehavior() { return nullptr; }
 
 
     // Sudden Termination --------------------------------------------------
 
     // Disable/Enable sudden termination on a process level. When possible, it
     // is preferable to disable sudden termination on a per-frame level via
     // WebFrameClient::suddenTerminationDisablerChanged.
     virtual void suddenTerminationChanged(bool enabled) { }
 
-
     // System --------------------------------------------------------------
 
     // Returns a value such as "en-US".
     virtual WebString defaultLocale() { return WebString(); }
 
     // Wall clock time in seconds since the epoch.
     virtual double currentTimeSeconds() { return 0; }
 
     // Monotonically increasing time in seconds from an arbitrary fixed point in the past.
     // This function is expected to return at least millisecond-precision values. For this reason,
     // it is recommended that the fixed point be no further in the past than the epoch.
     virtual double monotonicallyIncreasingTimeSeconds() { return 0; }
 
     // System trace time in seconds. For example, on Chrome OS, this timestamp should be
     // synchronized with ftrace timestamps.
     virtual double systemTraceTime() { return 0; }
 
     // WebKit clients must implement this funcion if they use cryptographic randomness.
     virtual void cryptographicallyRandomValues(unsigned char* buffer, size_t length) = 0;
 
     // Returns an interface to the main thread. Can be null if blink was initialized on a thread without a message loop.
     BLINK_PLATFORM_EXPORT WebThread* mainThread() const;
 
     // Returns an interface to the compositor thread. This can be null if the
     // renderer was created with threaded rendering desabled.
     virtual WebThread* compositorThread() const { return 0; }
 
+    /// Verifies that the platform allows 'SecurityOrigin' objects to be granted universal access.
+    virtual bool canGrantUniversalAccess() { return false; }
+
     // Vibration -----------------------------------------------------------
 
     // Starts a vibration for the given duration in milliseconds. If there is currently an active
     // vibration it will be cancelled before the new one is started.
     virtual void vibrate(unsigned time) { }
 
     // Cancels the current vibration, if there is one.
     virtual void cancelVibration() { }
 
 
@@ skipping 294 matching lines @@
 protected:
     BLINK_PLATFORM_EXPORT Platform();
     virtual ~Platform() { }
 
     WebThread* m_mainThread;
 };
 
 } // namespace blink
 
 #endif