Mark drags starting in web content as tainted to avoid file path forgery

ui/base/dragdrop/gtk_dnd_util.h

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef UI_BASE_DRAGDROP_GTK_DND_UTIL_H_
 #define UI_BASE_DRAGDROP_GTK_DND_UTIL_H_
 
 #include <gtk/gtk.h>
 
 #include <vector>
@@ skipping 21 matching lines @@
   // Other types.  NETSCAPE_URL is provided for compatibility with other
   // apps.
   NETSCAPE_URL = 1 << 7,
 
   // Used for drag-out download.
   TEXT_PLAIN_NO_CHARSET = 1 << 8,
   DIRECT_SAVE_FILE = 1 << 9,
 
   // Custom data for web drag/drop.
   CUSTOM_DATA = 1 << 10,
-  INVALID_TARGET = 1 << 11,
+
+  // Tracks if the drag originated from the renderer.
+  RENDERER_TAINT = 1 << 11,
+
+  INVALID_TARGET = 1 << 12,
 };
 
 // Get the atom for a given target (of the above enum type). Will return NULL
 // for non-custom targets, such as CHROME_TEXT_PLAIN.
 UI_BASE_EXPORT GdkAtom GetAtomForTarget(int target);
 
 // Creates a target list from the given mask. The mask should be an OR of
 // CHROME_* values. The target list is returned with ref count 1; the caller
 // is responsible for calling gtk_target_list_unref() when it is no longer
 // needed.
@@ skipping 29 matching lines @@
                                    std::vector<GURL>* urls);
 
 // Extracts a Netscape URL (url\ntitle) from |selection_data|.
 UI_BASE_EXPORT bool ExtractNetscapeURL(GtkSelectionData* selection_data,
                                        GURL* url,
                                        base::string16* title);
 
 }  // namespace ui
 
 #endif  // UI_BASE_DRAGDROP_GTK_DND_UTIL_H_