Update the child process security policy to use explicit permission grants.

content/browser/renderer_host/render_view_host_impl.cc

Index: content/browser/renderer_host/render_view_host_impl.cc
diff --git a/content/browser/renderer_host/render_view_host_impl.cc b/content/browser/renderer_host/render_view_host_impl.cc
index c2b058414bca4b3b6057ddfb37cef3ec8558145d..3262ce1ee0bb1cadbdb87541b4273e9bbf53e7f0 100644
--- a/content/browser/renderer_host/render_view_host_impl.cc
+++ b/content/browser/renderer_host/render_view_host_impl.cc
@@ -834,12 +834,18 @@ void RenderViewHostImpl::SetInitialFocus(bool reverse) {
 
 void RenderViewHostImpl::FilesSelectedInChooser(
     const std::vector<ui::SelectedFileInfo>& files,
-    int permissions) {
+    RenderViewHost::FileSelectionPermissions permissions) {
   // Grant the security access requested to the given files.
   for (size_t i = 0; i < files.size(); ++i) {
     const ui::SelectedFileInfo& file = files[i];
-    ChildProcessSecurityPolicyImpl::GetInstance()->GrantPermissionsForFile(
-        GetProcess()->GetID(), file.local_path, permissions);
+    if (permissions == RenderViewHost::FILE_PERMISSION_READ_ONLY) {
+      ChildProcessSecurityPolicyImpl::GetInstance()->GrantReadFile(
+          GetProcess()->GetID(), file.local_path);
+    }
+    if (permissions == RenderViewHost::FILE_PERMISSION_WRITE) {

[Tom Sepez, 2013/07/09 18:52:50]

nit: else if

[Greg Billock, 2013/07/09 21:09:50]

Done.

+      ChildProcessSecurityPolicyImpl::GetInstance()->GrantCreateWriteFile(
+          GetProcess()->GetID(), file.local_path);
+    }
   }
   Send(new ViewMsg_RunFileChooserResponse(GetRoutingID(), files));
 }