PS - Adjusting webRequest API for use in Public Sessions

extensions/browser/api/web_request/web_request_event_details.cc

 // Copyright 2016 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "extensions/browser/api/web_request/web_request_event_details.h"
 
 #include "base/callback.h"
 #include "base/strings/string_number_conversions.h"
 #include "content/public/browser/browser_thread.h"
 #include "content/public/browser/render_frame_host.h"
@@ skipping 180 matching lines @@
   return result;
 }
 
 std::unique_ptr<base::DictionaryValue>
 WebRequestEventDetails::GetAndClearDict() {
   std::unique_ptr<base::DictionaryValue> result(new base::DictionaryValue);
   dict_.Swap(result.get());
   return result;
 }
 
+std::unique_ptr<WebRequestEventDetails>
+WebRequestEventDetails::WhitelistedCopyForPublicSession() {
+  std::unique_ptr<WebRequestEventDetails> copy(new WebRequestEventDetails);
+
+  // Explicitly whitelist only safe attributes.
+  copy->render_process_id_ = render_process_id_;
+  copy->render_frame_id_ = render_frame_id_;
+
+  for (const char* safe_attr : {"method", "requestId", "timeStamp", "type",
+                                "tabId", "frameId", "parentFrameId",
+                                "fromCache", "error", "ip", "statusLine",
+                                "statusCode"}) {
+    base::Value* val;
+    if (dict_.Get(safe_attr, &val))
+      copy->dict_.Set(safe_attr, val->CreateDeepCopy());
+  }
+
+  // URL is stripped down to the origin.
+  std::string url;
+  dict_.GetString(keys::kUrlKey, &url);
+  GURL gurl(url);
+  copy->SetString(keys::kUrlKey, gurl.GetOrigin().spec());
+
+  return copy;
+}
+
+WebRequestEventDetails::WebRequestEventDetails()
+    : extra_info_spec_(0), render_process_id_(0), render_frame_id_(0) {}
+
 void WebRequestEventDetails::OnDeterminedFrameData(
     std::unique_ptr<WebRequestEventDetails> self,
     const DeterminedFrameDataCallback& callback,
     const ExtensionApiFrameIdMap::FrameData& frame_data) {
   SetFrameData(frame_data);
   callback.Run(std::move(self));
 }
 
 }  // namespace extensions