Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(755)

Unified Diff: content/browser/child_process_security_policy_impl.h

Issue 2111343002: Move implementation of ChildProcessSecurityPolicyImpl to c/b/shared, and wrap in c/b (Closed) Base URL: https://chromium.googlesource.com/chromium/src.git@mffr-win
Patch Set: . Created 4 years, 6 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
Index: content/browser/child_process_security_policy_impl.h
diff --git a/content/browser/child_process_security_policy_impl.h b/content/browser/child_process_security_policy_impl.h
index 271e69c0acd110ed0e3d74f7b1d0c8512300973f..fb331a1de1949a820d4a5a3cffa9cd6d1f526b42 100644
--- a/content/browser/child_process_security_policy_impl.h
+++ b/content/browser/child_process_security_policy_impl.h
@@ -171,86 +171,10 @@ class CONTENT_EXPORT ChildProcessSecurityPolicyImpl
NoLeak);
FRIEND_TEST_ALL_PREFIXES(ChildProcessSecurityPolicyTest, FilePermissions);
- class SecurityState;
-
- typedef std::set<std::string> SchemeSet;
- typedef std::map<int, SecurityState*> SecurityStateMap;
- typedef std::map<int, int> WorkerToMainProcessMap;
- typedef std::map<storage::FileSystemType, int> FileSystemPermissionPolicyMap;
-
// Obtain an instance of ChildProcessSecurityPolicyImpl via GetInstance().
ChildProcessSecurityPolicyImpl();
friend struct base::DefaultSingletonTraits<ChildProcessSecurityPolicyImpl>;
- // Adds child process during registration.
- void AddChild(int child_id);
-
- // Determines if certain permissions were granted for a file to given child
- // process. |permissions| is an internally defined bit-set.
- bool ChildProcessHasPermissionsForFile(int child_id,
- const base::FilePath& file,
- int permissions);
-
- // Grant a particular permission set for a file. |permissions| is an
- // internally defined bit-set.
- void GrantPermissionsForFile(int child_id,
- const base::FilePath& file,
- int permissions);
-
- // Grants access permission to the given isolated file system
- // identified by |filesystem_id|. See comments for
- // ChildProcessSecurityPolicy::GrantReadFileSystem() for more details.
- void GrantPermissionsForFileSystem(
- int child_id,
- const std::string& filesystem_id,
- int permission);
-
- // Determines if certain permissions were granted for a file. |permissions|
- // is an internally defined bit-set. If |child_id| is a worker process,
- // this returns true if either the worker process or its parent renderer
- // has permissions for the file.
- bool HasPermissionsForFile(int child_id,
- const base::FilePath& file,
- int permissions);
-
- // Determines if certain permissions were granted for a file in FileSystem
- // API. |permissions| is an internally defined bit-set.
- bool HasPermissionsForFileSystemFile(int child_id,
- const storage::FileSystemURL& url,
- int permissions);
-
- // Determines if certain permissions were granted for a file system.
- // |permissions| is an internally defined bit-set.
- bool HasPermissionsForFileSystem(
- int child_id,
- const std::string& filesystem_id,
- int permission);
-
- // You must acquire this lock before reading or writing any members of this
- // class. You must not block while holding this lock.
- base::Lock lock_;
-
- // These schemes are white-listed for all child processes. This set is
- // protected by |lock_|.
- SchemeSet web_safe_schemes_;
-
- // These schemes do not actually represent retrievable URLs. For example,
- // the the URLs in the "about" scheme are aliases to other URLs. This set is
- // protected by |lock_|.
- SchemeSet pseudo_schemes_;
-
- // This map holds a SecurityState for each child process. The key for the
- // map is the ID of the ChildProcessHost. The SecurityState objects are
- // owned by this object and are protected by |lock_|. References to them must
- // not escape this class.
- SecurityStateMap security_state_;
-
- // This maps keeps the record of which js worker thread child process
- // corresponds to which main js thread child process.
- WorkerToMainProcessMap worker_map_;
-
- FileSystemPermissionPolicyMap file_system_policy_map_;
-
DISALLOW_COPY_AND_ASSIGN(ChildProcessSecurityPolicyImpl);
};
« no previous file with comments | « content/browser/child_process_security_policy_browsertest.cc ('k') | content/browser/child_process_security_policy_impl.cc » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698