Require user gesture for powerful download operations

chrome/browser/resources/md_downloads/action_service.js

 // Copyright 2015 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 cr.define('downloads', function() {
   /**
    * @param {string} chromeSendName
    * @return {function(string):void} A chrome.send() callback with curried name.
    */
   function chromeSendWithId(chromeSendName) {
@@ skipping 60 matching lines @@
 
     /**
      * @return {boolean} Whether the user is currently searching for downloads
      *     (i.e. has a non-empty search term).
      */
     isSearching: function() {
       return this.searchTerms_.length > 0;
     },
 
     /** Opens the current local destination for downloads. */
-    openDownloadsFolder: chrome.send.bind(chrome, 'openDownloadsFolder'),
+    openDownloadsFolder: function() {
+      chrome.send('openDownloadsFolderRequiringGesture');
+    },
 
     /**
      * @param {string} id ID of the download to run locally on the user's box.
      */
-    openFile: chromeSendWithId('openFile'),
+    openFile: chromeSendWithId('openFileRequiringGesture'),
 
     /** @param {string} id ID the of the progressing download to pause. */
     pause: chromeSendWithId('pause'),
 
     /** @param {string} id ID of the finished download to remove. */
     remove: chromeSendWithId('remove'),
 
     /** @param {string} id ID of the paused download to resume. */
     resume: chromeSendWithId('resume'),
 
     /**
      * @param {string} id ID of the dangerous download to save despite
      *     warnings.
      */
-    saveDangerous: chromeSendWithId('saveDangerous'),
+    saveDangerous: chromeSendWithId('saveDangerousRequiringGesture'),
 
     /**
      * @param {string} searchText What to search for.
      * @return {boolean} Whether |searchText| resulted in new search terms.
      */
     search: function(searchText) {
       var searchTerms = ActionService.splitTerms(searchText);
       var sameTerms = searchTerms.length == this.searchTerms_.length;
 
       for (var i = 0; sameTerms && i < searchTerms.length; ++i) {
@@ skipping 16 matching lines @@
     show: chromeSendWithId('show'),
 
     /** Undo download removal. */
     undo: chrome.send.bind(chrome, 'undo'),
   };
 
   cr.addSingletonGetter(ActionService);
 
   return {ActionService: ActionService};
 });