ppapi: PPB_VpnProvider: Implement permission check

chrome/browser/plugins/chrome_content_browser_client_plugins_part.cc

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/plugins/chrome_content_browser_client_plugins_part.h"
 
 #include "base/command_line.h"
 #include "chrome/browser/plugins/plugin_info_message_filter.h"
 #include "chrome/browser/profiles/profile.h"
 #include "chrome/browser/renderer_host/pepper/chrome_browser_pepper_host_factory.h"
@@ skipping 95 matching lines @@
   }
 
   // Allow both public and private APIs if the command line says so.
   return chrome::IsHostAllowedByCommandLine(url, extension_set,
                                             ::switches::kAllowNaClSocketAPI);
 #else
   return false;
 #endif
 }
 
+bool ChromeContentBrowserClientPluginsPart::AllowPepperVpnProviderAPI(
+    content::BrowserContext* browser_context,
+    const GURL& url) {
+#if defined(ENABLE_EXTENSIONS)
+  Profile* profile = Profile::FromBrowserContext(browser_context);

[sky, 2016/05/17 19:08:37]

early return if !profile.

[adrian.belgun, 2016/05/17 20:13:32]

Done.

+  const extensions::ExtensionSet* extension_set = NULL;

[sky, 2016/05/17 19:08:37]

nullptr

[adrian.belgun, 2016/05/17 20:13:31]

Refactored.

+  if (profile) {
+    extension_set =
+        &extensions::ExtensionRegistry::Get(profile)->enabled_extensions();
+  }
+
+  // Access to the vpnProvider API is controlled by extension permissions.
+  if (url.is_valid() && url.SchemeIs(extensions::kExtensionScheme) &&
+      extension_set) {
+    const extensions::Extension* extension = extension_set->GetByID(url.host());
+    if (extension) {
+      const extensions::PermissionsData* permissions_data =
+          extension->permissions_data();
+      if (permissions_data->HasAPIPermission(
+              extensions::APIPermission::kVpnProvider)) {
+        return true;
+      }
+    }
+  }
+#endif
+
+  return false;
+}
+
 bool ChromeContentBrowserClientPluginsPart::IsPluginAllowedToUseDevChannelAPIs(
     content::BrowserContext* browser_context,
     const GURL& url,
     const std::set<std::string>& allowed_dev_channel_origins) {
   // Allow access for tests.
   if (base::CommandLine::ForCurrentProcess()->HasSwitch(
           switches::kEnablePepperTesting)) {
     return true;
   }
 
@@ skipping 19 matching lines @@
 }
 
 void ChromeContentBrowserClientPluginsPart::DidCreatePpapiPlugin(
     content::BrowserPpapiHost* browser_host) {
   browser_host->GetPpapiHost()->AddHostFactoryFilter(
       std::unique_ptr<ppapi::host::HostFactory>(
           new ChromeBrowserPepperHostFactory(browser_host)));
 }
 
 }  // namespace plugins