[HBD] Blanket BLOCK on all non-HTTP(s) and non-FILE URLs for Flash.

chrome/browser/plugins/chrome_plugin_service_filter.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CHROME_BROWSER_PLUGINS_CHROME_PLUGIN_SERVICE_FILTER_H_
 #define CHROME_BROWSER_PLUGINS_CHROME_PLUGIN_SERVICE_FILTER_H_
 
 #include <map>
 #include <memory>
 #include <set>
 #include <string>
 #include <vector>
 
 #include "base/files/file_path.h"
 #include "base/memory/singleton.h"
 #include "base/synchronization/lock.h"
 #include "chrome/browser/plugins/plugin_prefs.h"
 #include "content/public/browser/notification_observer.h"
 #include "content/public/browser/notification_registrar.h"
 #include "content/public/browser/plugin_service_filter.h"
 #include "content/public/common/webplugininfo.h"
 #include "url/gurl.h"
+#include "url/origin.h"
 
 class Profile;
 
 namespace content {
 class WebContents;
 }
 
 // This class must be created (by calling the |GetInstance| method) on the UI
 // thread, but is safe to use on any thread after that.
 class ChromePluginServiceFilter : public content::PluginServiceFilter,
@@ skipping 24 matching lines @@
 
   // Authorizes all plugins for a given WebContents. If |load_blocked| is true,
   // then the renderer is told to load the plugin with given |identifier| (or
   // pllugins if |identifier| is empty).
   // This method can only be called on the UI thread.
   void AuthorizeAllPlugins(content::WebContents* web_contents,
                            bool load_blocked,
                            const std::string& identifier);
 
   // PluginServiceFilter implementation.
-  // If |plugin_content_url| is not available, the same GURL passed as
-  // |top_level_url| should be passed. These GURLs may be empty.
+  // If |plugin_content_url| is not available, pass the same URL used to
+  // generate |main_frame_origin|. These parameters may be empty.
   bool IsPluginAvailable(int render_process_id,
                          int render_frame_id,
                          const void* context,
                          const GURL& plugin_content_url,
-                         const GURL& top_level_url,
+                         const url::Origin& main_frame_origin,
                          content::WebPluginInfo* plugin) override;
 
   // CanLoadPlugin always grants permission to the browser
   // (render_process_id == 0)
   bool CanLoadPlugin(int render_process_id,
                      const base::FilePath& path) override;
 
  private:
   friend struct base::DefaultSingletonTraits<ChromePluginServiceFilter>;
   struct ContextInfo;
@@ skipping 30 matching lines @@
   content::NotificationRegistrar registrar_;
 
   base::Lock lock_;  // Guards access to member variables.
 
   std::map<const void*, std::unique_ptr<ContextInfo>> resource_context_map_;
 
   std::map<int, ProcessDetails> plugin_details_;
 };
 
 #endif  // CHROME_BROWSER_PLUGINS_CHROME_PLUGIN_SERVICE_FILTER_H_