Flag and whitelist to allow crxfs api in NaCl

chrome/browser/renderer_host/pepper/pepper_crx_file_system_message_filter.h

Index: chrome/browser/renderer_host/pepper/pepper_crx_file_system_message_filter.h
diff --git a/chrome/browser/renderer_host/pepper/pepper_crx_file_system_message_filter.h b/chrome/browser/renderer_host/pepper/pepper_crx_file_system_message_filter.h
index 53669e15c076f211bd83980a2a0cd4601a6877d6..ed87f73edabfab621baed3d82c69f2c94f05c547 100644
--- a/chrome/browser/renderer_host/pepper/pepper_crx_file_system_message_filter.h
+++ b/chrome/browser/renderer_host/pepper/pepper_crx_file_system_message_filter.h
@@ -5,6 +5,7 @@
 #ifndef CHROME_BROWSER_RENDERER_HOST_PEPPER_PEPPER_CRX_FILE_SYSTEM_MESSAGE_FILTER_H_
 #define CHROME_BROWSER_RENDERER_HOST_PEPPER_PEPPER_CRX_FILE_SYSTEM_MESSAGE_FILTER_H_
 
+#include <set>
 #include <string>
 
 #include "base/files/file_path.h"
@@ -14,6 +15,8 @@
 #include "ppapi/host/resource_host.h"
 #include "ppapi/host/resource_message_filter.h"
 
+class Profile;
+
 namespace content {
 class BrowserPpapiHost;
 }
@@ -43,22 +46,31 @@ class PepperCrxFileSystemMessageFilter
  private:
   PepperCrxFileSystemMessageFilter(
       int render_process_id,
+      int render_view_id,
       const base::FilePath& profile_directory,
       const GURL& document_url);
 
   virtual ~PepperCrxFileSystemMessageFilter();
 
+  Profile* GetProfile();
+
   // Returns filesystem id of isolated filesystem if valid, or empty string
   // otherwise.  This must run on the UI thread because ProfileManager only
   // allows access on that thread.
-  std::string CreateIsolatedFileSystem();
+  std::string CreateIsolatedFileSystem(Profile* profile);
+
+  bool CanUseCrxFsAPI(Profile* profile) const;
 
   int32_t OnOpenFileSystem(ppapi::host::HostMessageContext* context);
 
   const int render_process_id_;
+  const int render_view_id_;
   const base::FilePath& profile_directory_;
   const GURL document_url_;
 
+  // Set of origins that can use CrxFs private APIs from NaCl.
+  std::set<std::string> allowed_crxfs_origins_;
+
   DISALLOW_COPY_AND_ASSIGN(PepperCrxFileSystemMessageFilter);
 };