Neutralize dangerous subresource files during Save Page.

content/public/browser/download_manager_delegate.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CONTENT_PUBLIC_BROWSER_DOWNLOAD_MANAGER_DELEGATE_H_
 #define CONTENT_PUBLIC_BROWSER_DOWNLOAD_MANAGER_DELEGATE_H_
 
 #include <stdint.h>
 
 #include "base/callback.h"
@@ skipping 101 matching lines @@
   // Asks the user for the path to save a page. The delegate calls the callback
   // to give the answer.
   virtual void ChooseSavePath(
       WebContents* web_contents,
       const base::FilePath& suggested_path,
       const base::FilePath::StringType& default_extension,
       bool can_save_as_complete,
       const SavePackagePathPickedCallback& callback) {
   }
 
+  // Sanitize a filename that's going to be used for saving a subresource of a
+  // SavePackage.
+  //
+  // If the delegate does nothing, the default filename already populated in
+  // |filename| will be used. Otherwise, the delegate can update |filename| to
+  // the desired filename.
+  //
+  // |filename| contains a basename with an extension, but without a path. This
+  // should be the case on return as well. I.e. |filename| cannot specify a
+  // relative path.
+  virtual void SanitizeSavePackageResourceName(base::FilePath* filename) {}
+
   // Opens the file associated with this download.
   virtual void OpenDownload(DownloadItem* download) {}
 
   // Shows the download via the OS shell.
   virtual void ShowDownloadInShell(DownloadItem* download) {}
 
   // Checks whether a downloaded file still exists.
   virtual void CheckForFileExistence(
       DownloadItem* download,
       const CheckForFileExistenceCallback& callback) {}
 
   // Return a GUID string used for identifying the application to the
   // system AV function for scanning downloaded files. If an empty
   // or invalid GUID string is returned, no client identification
   // will be given to the AV function.
   virtual std::string ApplicationClientIdForFileScanning() const;
 
  protected:
   virtual ~DownloadManagerDelegate();
 };
 
 }  // namespace content
 
 #endif  // CONTENT_PUBLIC_BROWSER_DOWNLOAD_MANAGER_DELEGATE_H_