Require user gesture for powerful download operations

content/renderer/web_ui_extension.cc

 // Copyright 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "content/renderer/web_ui_extension.h"
 
 #include <memory>
 #include <utility>
 
+#include "base/strings/string_util.h"
 #include "base/values.h"
 #include "content/common/view_messages.h"
 #include "content/public/child/v8_value_converter.h"
 #include "content/public/common/bindings_policy.h"
 #include "content/public/common/url_constants.h"
 #include "content/public/renderer/chrome_object_extensions_utils.h"
 #include "content/public/renderer/render_thread.h"
 #include "content/public/renderer/render_view.h"
 #include "content/renderer/web_ui_extension_data.h"
 #include "gin/arguments.h"
 #include "gin/function_template.h"
 #include "third_party/WebKit/public/web/WebDocument.h"
 #include "third_party/WebKit/public/web/WebKit.h"
 #include "third_party/WebKit/public/web/WebLocalFrame.h"
+#include "third_party/WebKit/public/web/WebUserGestureIndicator.h"
 #include "third_party/WebKit/public/web/WebView.h"
 #include "url/gurl.h"
 #include "v8/include/v8.h"
 
 namespace content {
 
 namespace {
 
 bool ShouldRespondToRequest(
     blink::WebFrame** frame_ptr,
@@ skipping 55 matching lines @@
   RenderView* render_view;
   if (!ShouldRespondToRequest(&frame, &render_view))
     return;
 
   std::string message;
   if (!args->GetNext(&message)) {
     args->ThrowError();
     return;
   }
 
+  if (base::EndsWith(message, "RequiringGesture",
+                     base::CompareCase::SENSITIVE) &&
+      !blink::WebUserGestureIndicator::isProcessingUserGesture()) {
+    NOTREACHED();
+    return;
+  }
+
   // If they've provided an optional message parameter, convert that into a
   // Value to send to the browser process.
   std::unique_ptr<base::ListValue> content;
   if (args->PeekNext().IsEmpty() || args->PeekNext()->IsUndefined()) {
     content.reset(new base::ListValue());
   } else {
     v8::Local<v8::Object> obj;
     if (!args->GetNext(&obj)) {
       args->ThrowError();
       return;
@@ skipping 16 matching lines @@
 std::string WebUIExtension::GetVariableValue(const std::string& name) {
   blink::WebFrame* frame;
   RenderView* render_view;
   if (!ShouldRespondToRequest(&frame, &render_view))
     return std::string();
 
   return WebUIExtensionData::Get(render_view)->GetValue(name);
 }
 
 }  // namespace content