Report if video capturing meets output protection requirement.

chrome/browser/media/desktop_capture_access_handler.cc

 // Copyright 2015 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/media/desktop_capture_access_handler.h"
 
 #include <utility>
 
 #include "base/command_line.h"
 #include "base/strings/string_number_conversions.h"
@@ skipping 427 matching lines @@
       !base::CommandLine::ForCurrentProcess()->HasSwitch(
           extensions::switches::kDisableDesktopCaptureAudio);
   const bool capture_audio =
       (check_audio_permission ? audio_permitted : true) && audio_requested &&
       audio_supported;
 
   ui = GetDevicesForDesktopCapture(&devices, media_id, capture_audio, true,
                                    GetApplicationTitle(web_contents, extension),
                                    base::UTF8ToUTF16(original_extension_name));
 
+  extension_whitelisted_ = MediaCaptureDevicesDispatcher::IsOriginForCasting(

[miu, 2016/04/16 00:05:29]

This value will be different for each session.  In other words, you need one of
these for each combination of
{render_process_id,render_frame_id,page_request_id}.

[xjz, 2016/04/21 23:50:44]

Done.

+                               request.security_origin) ||
+                           IsExtensionWhitelistedForScreenCapture(extension) ||
+                           IsBuiltInExtension(request.security_origin);
+
   callback.Run(devices, content::MEDIA_DEVICE_OK, std::move(ui));
 }
 
 void DesktopCaptureAccessHandler::UpdateMediaRequestState(
     int render_process_id,
     int render_frame_id,
     int page_request_id,
     content::MediaStreamType stream_type,
     content::MediaRequestState state) {
   DCHECK_CURRENTLY_ON(BrowserThread::UI);
   // Track desktop capture sessions.  Tracking is necessary to avoid unbalanced
   // session counts since not all requests will reach MEDIA_REQUEST_STATE_DONE,
   // but they will all reach MEDIA_REQUEST_STATE_CLOSING.
   if (stream_type != content::MEDIA_DESKTOP_VIDEO_CAPTURE)
     return;
 
   if (state == content::MEDIA_REQUEST_STATE_DONE) {
-    DesktopCaptureSession session = {
-        render_process_id, render_frame_id, page_request_id};
+    DesktopCaptureSession session = {render_process_id, render_frame_id,
+                                     page_request_id, false};
     desktop_capture_sessions_.push_back(session);
   } else if (state == content::MEDIA_REQUEST_STATE_CLOSING) {
     for (DesktopCaptureSessions::iterator it =
              desktop_capture_sessions_.begin();
          it != desktop_capture_sessions_.end(); ++it) {
       if (it->render_process_id == render_process_id &&
           it->render_frame_id == render_frame_id &&
           it->page_request_id == page_request_id) {
         desktop_capture_sessions_.erase(it);
         break;
       }
     }
   }
 }
 
 bool DesktopCaptureAccessHandler::IsCaptureInProgress() {
   return desktop_capture_sessions_.size() > 0;
 }
+
+bool DesktopCaptureAccessHandler::IsCaptureInProgress(int render_process_id,
+                                                      int render_frame_id,
+                                                      bool* is_link_secure) {
+  *is_link_secure = false;
+  if (desktop_capture_sessions_.size() <= 0)
+    return false;
+  for (DesktopCaptureSessions::iterator it = desktop_capture_sessions_.begin();
+       it != desktop_capture_sessions_.end(); ++it) {
+    if (it->render_process_id == render_process_id &&
+        it->render_frame_id == render_frame_id) {

[miu, 2016/04/16 00:05:29]

You're not checking page_request_id here.  So, should you only set
|*is_link_secure| to true when ALL sessions (i.e., those in the same render
frame, but with different page_request_id's) are secure?

[xjz, 2016/04/21 23:50:44]

Done. Check all sessions with same render frame.

+      *is_link_secure = it->is_capturing_link_secure && extension_whitelisted_;
+      return true;
+    }
+  }
+  return false;
+}
+
+void DesktopCaptureAccessHandler::UpdateCapturingLinkSecured(
+    int render_process_id,
+    int render_frame_id,
+    int page_request_id,
+    content::MediaStreamType stream_type,

[miu, 2016/04/16 00:05:29]

IMO, passing and checking the stream_type here is unnecessary. 
MediaCaptureDevicesDispatcher can only be calling this method in this class
after it has explicitly checked the stream_type.

[xjz, 2016/04/21 23:50:44]

Done.

+    bool is_secure) {
+  if (stream_type != content::MEDIA_DESKTOP_VIDEO_CAPTURE)
+    return;
+  for (DesktopCaptureSessions::iterator it = desktop_capture_sessions_.begin();
+       it != desktop_capture_sessions_.end(); ++it) {
+    if (it->render_process_id == render_process_id &&
+        it->render_frame_id == render_frame_id &&
+        it->page_request_id == page_request_id) {
+      it->is_capturing_link_secure = is_secure;
+      VLOG(1) << "DesktopCaptureAccessHandler:"
+              << " render_process_id: " << render_process_id
+              << " render_frame_id: " << render_frame_id
+              << " is_capturing_link_secure: " << is_secure;
+    }
+  }
+}