ppapi: PPB_VpnProvider: Implement permission check

chrome/browser/plugins/chrome_content_browser_client_plugins_part.cc

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/plugins/chrome_content_browser_client_plugins_part.h"
 
 #include "base/command_line.h"
 #include "chrome/browser/plugins/plugin_info_message_filter.h"
 #include "chrome/browser/profiles/profile.h"
 #include "chrome/browser/renderer_host/pepper/chrome_browser_pepper_host_factory.h"
@@ skipping 95 matching lines @@
   }
 
   // Allow both public and private APIs if the command line says so.
   return chrome::IsHostAllowedByCommandLine(url, extension_set,
                                             ::switches::kAllowNaClSocketAPI);
 #else
   return false;
 #endif
 }
 
+bool ChromeContentBrowserClientPluginsPart::IsPepperVpnProviderAPIAllowed(
+    content::BrowserContext* browser_context,
+    const GURL& url) {
+#if defined(ENABLE_EXTENSIONS)
+  Profile* profile = Profile::FromBrowserContext(browser_context);
+  if (!profile) {

[sky, 2016/05/17 21:12:40]

nit: no {}

[adrian.belgun, 2016/05/18 09:09:54]

Done.

+    return false;
+  }
+  const extensions::ExtensionSet* extension_set =
+      &extensions::ExtensionRegistry::Get(profile)->enabled_extensions();
+  if (!extension_set) {

[sky, 2016/05/17 21:12:39]

nit: no {}

[adrian.belgun, 2016/05/18 09:09:54]

Done.

+    return false;
+  }
+
+  // Access to the vpnProvider API is controlled by extension permissions.
+  if (url.is_valid() && url.SchemeIs(extensions::kExtensionScheme)) {
+    const extensions::Extension* extension = extension_set->GetByID(url.host());
+    if (extension) {
+      const extensions::PermissionsData* permissions_data =
+          extension->permissions_data();
+      if (permissions_data->HasAPIPermission(

[bbudge, 2016/05/18 07:28:35]

nit: Instead of local permissions_data, just:

if (extension->permissions_data()->HasAPIPermission(

[adrian.belgun, 2016/05/18 09:09:54]

Done.

+              extensions::APIPermission::kVpnProvider)) {
+        return true;
+      }
+    }
+  }
+#endif
+
+  return false;
+}
+
 bool ChromeContentBrowserClientPluginsPart::IsPluginAllowedToUseDevChannelAPIs(
     content::BrowserContext* browser_context,
     const GURL& url,
     const std::set<std::string>& allowed_dev_channel_origins) {
   // Allow access for tests.
   if (base::CommandLine::ForCurrentProcess()->HasSwitch(
           switches::kEnablePepperTesting)) {
     return true;
   }
 
@@ skipping 19 matching lines @@
 }
 
 void ChromeContentBrowserClientPluginsPart::DidCreatePpapiPlugin(
     content::BrowserPpapiHost* browser_host) {
   browser_host->GetPpapiHost()->AddHostFactoryFilter(
       std::unique_ptr<ppapi::host::HostFactory>(
           new ChromeBrowserPepperHostFactory(browser_host)));
 }
 
 }  // namespace plugins