Reland of land #2 of Enable whitelist generation for official builds.

chrome/BUILD.gn

 # Copyright 2014 The Chromium Authors. All rights reserved.
 # Use of this source code is governed by a BSD-style license that can be
 # found in the LICENSE file.
 
 import("//build/buildflag_header.gni")
 import("//build/config/chrome_build.gni")
 import("//build/config/compiler/compiler.gni")
 import("//build/config/features.gni")
 import("//build/config/locales.gni")
 import("//build/config/sanitizers/sanitizers.gni")
 import("//build/config/ui.gni")
 import("//build/config/win/console_app.gni")
 import("//build/config/win/manifest.gni")
 import("//chrome/chrome_repack_locales.gni")
 import("//chrome/common/features.gni")
 import("//chrome/version.gni")
 import("//ui/base/ui_features.gni")
 import("//v8/gni/v8.gni")
 
+if (enable_resource_whitelist_generation) {
+  android_resource_whitelist = "$root_gen_dir/chrome/resource_whitelist.txt"
+}
+
 if (is_android) {
   import("//build/config/android/rules.gni")
 } else if (is_mac) {
   import("//build/compiled_action.gni")
   import("//build/config/mac/rules.gni")
   import("//build/config/mac/symbols.gni")
   import("//build/mac/tweak_info_plist.gni")
   import("//build/util/branding.gni")
   import("//build/util/version.gni")
   import("//build_overrides/v8.gni")
@@ skipping 1418 matching lines @@
   }
 
   # GYP outputs the file in the gen/repack directory. On non-Mac/iOS platforms
   # it them copies it. This skipes the copy step and writes it to the final
   # location.
   if (is_mac || is_ios) {
     output = "$root_gen_dir/repack/resources.pak"
   } else {
     output = "$root_out_dir/resources.pak"
   }
+
+  if (enable_resource_whitelist_generation) {
+    repack_whitelist = android_resource_whitelist
+    deps += [ "//chrome:resource_whitelist" ]
+  }
 }
 
 # GYP version: chrome/chrome_resources.gyp:browser_tests_pak
 repack("browser_tests_pak") {
   sources = [
     "$root_gen_dir/chrome/options_test_resources.pak",
     "$root_gen_dir/chrome/webui_test_resources.pak",
   ]
   output = "$root_out_dir/browser_tests.pak"
   deps = [
@@ skipping 94 matching lines @@
     if (enable_extensions) {
       sources += [ "$root_gen_dir/extensions/extensions_browser_resources_${percent}_percent.pak" ]
       deps += [ "//extensions:extensions_browser_resources" ]
     }
     if (enable_app_list) {
       sources += [ "$root_gen_dir/ui/app_list/resources/app_list_resources_${percent}_percent.pak" ]
       deps += [ "//ui/app_list/resources" ]
     }
 
     output = repack_output_file
+
+    if (enable_resource_whitelist_generation) {
+      repack_whitelist = android_resource_whitelist
+      deps += [ "//chrome:resource_whitelist" ]
+    }
   }
 
   copy(copy_name) {
     visibility = [ ":*" ]
     deps = [
       ":$repack_name",
     ]
     sources = [
       repack_output_file,
     ]
@@ skipping 93 matching lines @@
       "//chrome/common",
       "//chrome/gpu",
       "//chrome/renderer",
       "//chrome/utility",
       "//components/safe_browsing_db:safe_browsing_db_mobile",
       "//content/public/app:both",
     ]
   }
 }
 
+if (enable_resource_whitelist_generation) {
+  action("resource_whitelist") {
+    deps = [
+      "//chrome/android:chrome",
+    ]
+    script = "//tools/resources/generate_resource_whitelist.py"
+
+    _infile = "$root_out_dir/libchrome$shlib_extension.whitelist"
+    inputs = [
+      _infile,
+    ]
+
+    _outfile = android_resource_whitelist
+    outputs = [
+      _outfile,
+    ]
+
+    args = [
+      "-i",
+      rebase_path(_infile, root_build_dir),
+      "-o",
+      rebase_path(_outfile, root_build_dir),
+      "--out-dir=.",
+    ]
+  }
+}
+
 if (is_linux) {
   action("manpage") {
     if (is_chrome_branded) {
       name = "Google Chrome"
       filename = "google-chrome"
       confdir = "google-chrome"
     } else {
       name = "Chromium"
       filename = "chromium-browser"
       confdir = "chromium"
@@ skipping 63 matching lines @@
       "//chrome/app/theme/$branding_path_component/product_logo_48.png",
       "//chrome/tools/build/linux/chrome-wrapper",
       "//third_party/xdg-utils/scripts/xdg-mime",
       "//third_party/xdg-utils/scripts/xdg-settings",
     ]
     outputs = [
       "$root_out_dir/{{source_file_part}}",
     ]
   }
 }