Hook up external protocol handler to user gestures to prevent malicious sites...

chrome/browser/gtk/external_protocol_dialog_gtk.cc

 // Copyright (c) 2009 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/gtk/external_protocol_dialog_gtk.h"
 
 #include <gtk/gtk.h>
 
 #include "app/l10n_util.h"
 #include "base/histogram.h"
+#include "base/message_loop.h"
 #include "chrome/browser/external_protocol_handler.h"
 #include "chrome/browser/tab_contents/tab_contents.h"
 #include "chrome/browser/tab_contents/tab_contents_view.h"
 #include "chrome/browser/tab_contents/tab_util.h"
 #include "chrome/common/gtk_util.h"
 #include "grit/chromium_strings.h"
 #include "grit/generated_resources.h"
 
 namespace {
 
 const int kMessageWidth = 400;
 
 }  // namespace
 
 ///////////////////////////////////////////////////////////////////////////////
 // ExternalProtocolHandler
 
 // static
 void ExternalProtocolHandler::RunExternalProtocolDialog(
     const GURL& url, int render_process_host_id, int routing_id) {
   new ExternalProtocolDialogGtk(url);
 }
 
 ///////////////////////////////////////////////////////////////////////////////
 // ExternalProtocolDialogGtk
 
 ExternalProtocolDialogGtk::ExternalProtocolDialogGtk(const GURL& url)
     : url_(url),
       creation_time_(base::Time::Now()) {
+  DCHECK_EQ(MessageLoop::TYPE_UI, MessageLoop::current()->type());
 
   dialog_ = gtk_dialog_new_with_buttons(
       l10n_util::GetStringUTF8(IDS_EXTERNAL_PROTOCOL_TITLE).c_str(),
       NULL,
       GTK_DIALOG_NO_SEPARATOR,
       GTK_STOCK_CANCEL,
       GTK_RESPONSE_REJECT,
       NULL);
 
   gtk_util::AddButtonToDialog(dialog_,
@@ skipping 28 matching lines @@
   if (response == GTK_RESPONSE_ACCEPT) {
     UMA_HISTOGRAM_LONG_TIMES("clickjacking.launch_url",
                              base::Time::Now() - dialog->creation_time_);
 
     ExternalProtocolHandler::LaunchUrlWithoutSecurityCheck(dialog->url_);
   }
 
   gtk_widget_destroy(widget);
   delete dialog;
 }