Update the child process security policy to use explicit permission grants.

content/public/browser/render_view_host.h

Index: content/public/browser/render_view_host.h
diff --git a/content/public/browser/render_view_host.h b/content/public/browser/render_view_host.h
index ecb2fb712d7f3cc4b75274aece56780bf2dbde40..12ced4c2758c903d311b12a5c995fb3bf50f6bf3 100644
--- a/content/public/browser/render_view_host.h
+++ b/content/public/browser/render_view_host.h
@@ -209,13 +209,17 @@ class CONTENT_EXPORT RenderViewHost : virtual public RenderWidgetHost {
   // closing the entire tab.
   virtual void FirePageBeforeUnload(bool for_cross_site_transition) = 0;
 
+  enum FileSelectionPermissions {

[vandebo (ex-Chrome), 2013/06/27 22:35:17]

style guide says this should go above any methods.  Considering the number of
methods here, I'm not going to push too hard if you really think it should stay
here.

[Greg Billock, 2013/06/28 18:40:33]

Yeah, that was what I was thinking. I can move it if we want to.

On 2013/06/27 22:35:17, vandebo wrote:

+    FILE_PERMISSION_READ_ONLY,
+    FILE_PERMISSION_WRITE
+  };
+
   // Notifies the Listener that one or more files have been chosen by the user
-  // from a file chooser dialog for the form. |permissions| are flags from the
-  // base::PlatformFileFlags enum which specify which file permissions should
-  // be granted to the renderer.
+  // from a file chooser dialog for the form. |permissions| is the permission
+  // security policy for the selected file.
   virtual void FilesSelectedInChooser(
       const std::vector<ui::SelectedFileInfo>& files,
-      int permissions) = 0;
+      FileSelectionPermissions permissions) = 0;
 
   virtual RenderViewHostDelegate* GetDelegate() const = 0;