Implement granular cross-origin XHR for extensions.

chrome/renderer/extensions/extension_process_bindings.cc

 // Copyright (c) 2009 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/renderer/extensions/extension_process_bindings.h"
 
 #include "base/singleton.h"
 #include "chrome/common/extensions/extension.h"
+#include "chrome/common/extensions/url_pattern.h"
 #include "chrome/common/render_messages.h"
 #include "chrome/common/url_constants.h"
 #include "chrome/renderer/extensions/bindings_utils.h"
 #include "chrome/renderer/extensions/event_bindings.h"
 #include "chrome/renderer/extensions/renderer_extension_bindings.h"
 #include "chrome/renderer/js_only_v8_extensions.h"
 #include "chrome/renderer/render_view.h"
 #include "grit/common_resources.h"
 #include "grit/renderer_resources.h"
 #include "webkit/api/public/WebFrame.h"
+#include "webkit/api/public/WebURL.h"
+#include "webkit/api/public/WebKit.h"
 
 using bindings_utils::GetStringResource;
 using bindings_utils::ContextInfo;
 using bindings_utils::ContextList;
 using bindings_utils::GetContexts;
 using bindings_utils::GetPendingRequestMap;
 using bindings_utils::PendingRequest;
 using bindings_utils::PendingRequestMap;
 using bindings_utils::ExtensionBase;
 
@@ skipping 282 matching lines @@
   PageActionIdMap& page_action_map = *GetPageActionMap();
   if (!page_actions.empty()) {
     page_action_map[extension_id] = page_actions;
   } else {
     if (page_action_map.find(extension_id) != page_action_map.end())
       page_action_map.erase(extension_id);
   }
 }
 
 // static
-void ExtensionProcessBindings::SetPermissions(
+void ExtensionProcessBindings::SetAPIPermissions(
     const std::string& extension_id,
     const std::vector<std::string>& permissions) {
   PermissionsMap& permissions_map = *GetPermissionsMap(extension_id);
 
-  // Default all permissions to false, then enable the ones in the vector.
+  // Default all the API permissions to off. We will reset them below.
   for (size_t i = 0; i < Extension::kNumPermissions; ++i)
     permissions_map[Extension::kPermissionNames[i]] = false;
   for (size_t i = 0; i < permissions.size(); ++i)
     permissions_map[permissions[i]] = true;
 }
 
+// static
+void ExtensionProcessBindings::SetHostPermissions(
+    const GURL& extension_url,
+    const std::vector<URLPattern>& permissions) {
+  for (size_t i = 0; i < permissions.size(); ++i) {
+    WebKit::whiteListAccessFromOrigin(
+        extension_url,
+        WebKit::WebString::fromUTF8(permissions[i].scheme()),
+        WebKit::WebString::fromUTF8(permissions[i].host()),
+        permissions[i].match_subdomains());
+  }
+}
+
 // Given a name like "tabs.onConnect", return the permission name required
 // to access that API ("tabs" in this example).
 static std::string GetPermissionName(const std::string& function_name) {
   size_t first_dot = function_name.find('.');
   std::string permission_name = function_name.substr(0, first_dot);
   if (permission_name == "windows")
     return "tabs";  // windows and tabs are the same permission.
   return permission_name;
 }
 
@@ skipping 38 matching lines @@
 
   v8::Local<v8::Function> function =
       v8::Local<v8::Function>::Cast(console_error);
   v8::Local<v8::Value> argv[] = { v8::String::New(error_msg.c_str()) };
   if (!function.IsEmpty())
     function->Call(console->ToObject(), arraysize(argv), argv);
 
   return v8::Undefined();
 #endif
 }