Implement MediaMetadata artwork in content

content/browser/media/android/browser_media_session_manager.cc

 // Copyright 2015 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "content/browser/media/android/browser_media_session_manager.h"
 
+#include "content/browser/media/session/media_session.h"
+#include "content/browser/web_contents/web_contents_impl.h"
 #include "content/common/media/media_session_messages_android.h"
 #include "content/public/browser/render_frame_host.h"
 #include "content/public/browser/render_process_host.h"
 #include "content/public/common/media_metadata.h"
 
 namespace content {
 
 BrowserMediaSessionManager::BrowserMediaSessionManager(
     RenderFrameHost* render_frame_host)
     : render_frame_host_(render_frame_host) {}
@@ skipping 13 matching lines @@
     const MediaMetadata& insecure_metadata) {
   // When receiving a MediaMetadata, the browser process can't trust that it is
   // coming from a known and secure source. It must be processed accordingly.
   MediaMetadata metadata;
   metadata.title =
       insecure_metadata.title.substr(0, MediaMetadata::kMaxIPCStringLength);
   metadata.artist =
       insecure_metadata.artist.substr(0, MediaMetadata::kMaxIPCStringLength);
   metadata.album =
       insecure_metadata.album.substr(0, MediaMetadata::kMaxIPCStringLength);
+  // TODO(zqzhang): security checking for artwork?

[palmer, 2016/06/14 22:06:31]

What is the nature of the artwork?

To what extent do we trust it? (For example, is it a JPEG that we parse and
render in the browser process?)

To what extent can we establish its trustworthiness? (For example, if for some
reason we had to render it in the browser, perhaps we could first transform it
to a simpler, safer format or otherwise normalize it in a utility process. Or
something.)

[Zhiqiang Zhang (Slow), 2016/06/20 18:26:49]

See the other reply for details.

+  metadata.artwork = insecure_metadata.artwork;
 
   if (metadata != insecure_metadata) {
     render_frame_host_->GetProcess()->ShutdownForBadMessage();
     return;
   }
 
-  NOTIMPLEMENTED();
+  WebContentsImpl* contents = static_cast<WebContentsImpl*>(
+      WebContents::FromRenderFrameHost(render_frame_host_));
+  if (contents)
+    MediaSession::Get(contents)->SetMetadata(metadata);
 }
 
 int BrowserMediaSessionManager::GetRoutingID() const {
   return render_frame_host_->GetRoutingID();
 }
 
 bool BrowserMediaSessionManager::Send(IPC::Message* msg) {
   return render_frame_host_->Send(msg);
 }
 
 }  // namespace content