Require user gesture for powerful download operations

chrome/browser/resources/md_downloads/action_service.js

Index: chrome/browser/resources/md_downloads/action_service.js
diff --git a/chrome/browser/resources/md_downloads/action_service.js b/chrome/browser/resources/md_downloads/action_service.js
index 6c10e035dbb43149082e683b864f6ad8a73aecbd..c3557124dea08ddc18ac5b46061bc0cda63d6d74 100644
--- a/chrome/browser/resources/md_downloads/action_service.js
+++ b/chrome/browser/resources/md_downloads/action_service.js
@@ -78,12 +78,14 @@ cr.define('downloads', function() {
     },
 
     /** Opens the current local destination for downloads. */
-    openDownloadsFolder: chrome.send.bind(chrome, 'openDownloadsFolder'),
+    openDownloadsFolder: function() {
+      chrome.send('openDownloadsFolderRequiringGesture');
+    },
 
     /**
      * @param {string} id ID of the download to run locally on the user's box.
      */
-    openFile: chromeSendWithId('openFile'),
+    openFile: chromeSendWithId('openFileRequiringGesture'),
 
     /** @param {string} id ID the of the progressing download to pause. */
     pause: chromeSendWithId('pause'),
@@ -98,7 +100,7 @@ cr.define('downloads', function() {
      * @param {string} id ID of the dangerous download to save despite
      *     warnings.
      */
-    saveDangerous: chromeSendWithId('saveDangerous'),
+    saveDangerous: chromeSendWithId('saveDangerousRequiringGesture'),
 
     /**
      * @param {string} searchText What to search for.