Hook up external protocol handler to user gestures to prevent malicious sites...

chrome/browser/external_protocol_handler.h

 // Copyright (c) 2009 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CHROME_BROWSER_EXTERNAL_PROTOCOL_HANDLER_H_
 #define CHROME_BROWSER_EXTERNAL_PROTOCOL_HANDLER_H_
 
 #include <string>
 
 class DictionaryValue;
@@ skipping 46 matching lines @@
   // url has already been escaped, which happens in LaunchUrl.
   // NOTE: You should Not call this function directly unless you are sure the
   // url you have has been checked against the blacklist, and has been escaped.
   // All calls to this function should originate in some way from LaunchUrl.
   // This will execute on the file thread.
   static void LaunchUrlWithoutSecurityCheck(const GURL& url);
 
   // Prepopulates the dictionary with known protocols to deny or allow, if
   // preferences for them do not already exist.
   static void PrepopulateDictionary(DictionaryValue* win_pref);
+
+  // Called when the user interacts with a web page.
+  static void OnUserGesture();
 };
 
 #endif  // CHROME_BROWSER_EXTERNAL_PROTOCOL_HANDLER_H_