Require a user gesture to use navigator.share.

third_party/WebKit/Source/modules/webshare/NavigatorShare.cpp

 // Copyright 2016 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "modules/webshare/NavigatorShare.h"
 
 #include "core/dom/DOMException.h"
 #include "core/dom/Document.h"
 #include "core/dom/ExceptionCode.h"
 #include "core/frame/LocalFrame.h"
 #include "core/frame/Navigator.h"
 #include "modules/webshare/ShareData.h"
+#include "platform/UserGestureIndicator.h"
 #include "platform/mojo/MojoHelper.h"
 #include "public/platform/InterfaceProvider.h"
 #include "public/platform/Platform.h"
 
 namespace blink {
 
 class NavigatorShare::ShareClientImpl final : public GarbageCollected<ShareClientImpl> {
 public:
     ShareClientImpl(NavigatorShare*, ScriptPromiseResolver*);
 
@@ skipping 51 matching lines @@
 {
 }
 
 const char* NavigatorShare::supplementName()
 {
     return "NavigatorShare";
 }
 
 ScriptPromise NavigatorShare::share(ScriptState* scriptState, const ShareData& shareData)
 {
+    if (!UserGestureIndicator::utilizeUserGesture())
+        return ScriptPromise::rejectWithDOMException(scriptState, DOMException::create(SecurityError, "Must be handling a user gesture to perform a share request."));

[Matt Giuca, 2016/08/08 08:00:06]

nit: Maybe split this into a temp variable, for line length.

[Sam McNally, 2016/08/08 09:08:44]

Done.

+
     if (!m_service) {
         Document* doc = toDocument(scriptState->getExecutionContext());
         DCHECK(doc);
         LocalFrame* frame = doc->frame();
         DCHECK(frame);
         frame->interfaceProvider()->getInterface(mojo::GetProxy(&m_service));
         DCHECK(m_service);
     }
 
     ScriptPromiseResolver* resolver = ScriptPromiseResolver::create(scriptState);
     ShareClientImpl* client = new ShareClientImpl(this, resolver);
     m_clients.add(client);
     ScriptPromise promise = resolver->promise();
 
     // TODO(sammc): Use shareData.url().
     m_service->Share(shareData.hasTitle() ? shareData.title() : emptyString(), shareData.hasText() ? shareData.text() : emptyString(), convertToBaseCallback(WTF::bind(&ShareClientImpl::callback, wrapPersistent(client))));
 
     return promise;
 }
 
 ScriptPromise NavigatorShare::share(ScriptState* scriptState, Navigator& navigator, const ShareData& shareData)
 {
     return from(navigator).share(scriptState, shareData);
 }
 
 } // namespace blink