[HBD] If DefaultPluginPolicy set to 3, prompt should allow flash for the next page load only

chrome/browser/plugins/flash_permission_context.cc

 // Copyright 2016 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/plugins/flash_permission_context.h"
 
 #include "chrome/browser/content_settings/host_content_settings_map_factory.h"
 #include "chrome/browser/permissions/permission_request_id.h"
+#include "chrome/browser/plugins/flash_temporary_permission_tracker.h"
 #include "chrome/browser/plugins/plugin_utils.h"
 #include "chrome/browser/plugins/plugins_field_trial.h"
+#include "chrome/browser/profiles/profile.h"
+#include "chrome/browser/ui/webui/site_settings_helper.h"
 #include "components/content_settings/core/browser/host_content_settings_map.h"
 #include "components/content_settings/core/common/content_settings_pattern.h"
 #include "content/public/browser/navigation_controller.h"
 #include "content/public/browser/render_frame_host.h"
 #include "content/public/browser/web_contents.h"
 #include "url/origin.h"
 
+namespace {
+
+bool PluginsEnterpriseSettingEnabled(
+    HostContentSettingsMap* host_content_settings_map) {
+  std::string provider_id;
+  host_content_settings_map->GetDefaultContentSetting(
+      CONTENT_SETTINGS_TYPE_PLUGINS, &provider_id);
+  return provider_id == site_settings::kPolicyProviderId;
+}
+
+}  // namespace
+
 FlashPermissionContext::FlashPermissionContext(Profile* profile)
     : PermissionContextBase(profile,
                             content::PermissionType::FLASH,
                             CONTENT_SETTINGS_TYPE_PLUGINS) {}
 
 FlashPermissionContext::~FlashPermissionContext() {}
 
 ContentSetting FlashPermissionContext::GetPermissionStatus(
     const GURL& requesting_origin,
     const GURL& embedding_origin) const {
   HostContentSettingsMap* host_content_settings_map =
       HostContentSettingsMapFactory::GetForProfile(profile());
   ContentSetting flash_setting = PluginUtils::GetFlashPluginContentSetting(
       host_content_settings_map, url::Origin(embedding_origin),
       requesting_origin, nullptr);
   flash_setting = PluginsFieldTrial::EffectiveContentSetting(
-      host_content_settings_map, CONTENT_SETTINGS_TYPE_PLUGINS, flash_setting);
+      host_content_settings_map, content_settings_type(), flash_setting);
   if (flash_setting == CONTENT_SETTING_DETECT_IMPORTANT_CONTENT)
     return CONTENT_SETTING_ASK;
   return flash_setting;
 }
 
 void FlashPermissionContext::UpdateTabContext(const PermissionRequestID& id,
                                               const GURL& requesting_origin,
                                               bool allowed) {
   if (!allowed)
     return;
-  // Automatically refresh the page.
+
   content::WebContents* web_contents =
       content::WebContents::FromRenderFrameHost(
           content::RenderFrameHost::FromID(id.render_process_id(),
                                            id.render_frame_id()));
+
+  if (PluginsEnterpriseSettingEnabled(
+          HostContentSettingsMapFactory::GetForProfile(profile()))) {
+    // Enable the grant temporarily.
+    FlashTemporaryPermissionTracker::Get(profile())->FlashEnabledForWebContents(
+        web_contents);
+  }
+
+  // Automatically refresh the page.
   web_contents->GetController().Reload(true /* check_for_repost */);
 }
 
 void FlashPermissionContext::UpdateContentSetting(
     const GURL& requesting_origin,
     const GURL& embedding_origin,
     ContentSetting content_setting) {
   DCHECK_EQ(requesting_origin, requesting_origin.GetOrigin());
   DCHECK_EQ(embedding_origin, embedding_origin.GetOrigin());
   DCHECK(content_setting == CONTENT_SETTING_ALLOW ||
          content_setting == CONTENT_SETTING_BLOCK);
 
+  HostContentSettingsMap* host_content_settings_map =
+      HostContentSettingsMapFactory::GetForProfile(profile());
+  // If there is an enterprise ASK setting in effect, don't store the setting as
+  // it won't have any effect anyway.
+  if (PluginsEnterpriseSettingEnabled(host_content_settings_map))
+    return;
+
   // If the request was for a file scheme, allow or deny all file:/// URLs.
   ContentSettingsPattern pattern;
   if (embedding_origin.SchemeIsFile())
     pattern = ContentSettingsPattern::FromString("file:///*");
   else
     pattern = ContentSettingsPattern::FromURLNoWildcard(embedding_origin);
-
-  HostContentSettingsMapFactory::GetForProfile(profile())
-      ->SetContentSettingCustomScope(
-          pattern, ContentSettingsPattern::Wildcard(), content_settings_type(),
-          std::string(), content_setting);
+  host_content_settings_map->SetContentSettingCustomScope(
+      pattern, ContentSettingsPattern::Wildcard(), content_settings_type(),
+      std::string(), content_setting);
 }
 
 bool FlashPermissionContext::IsRestrictedToSecureOrigins() const {
   return false;
 }