Implement origin specific Permissions Blacklisting.

chrome/browser/permissions/permission_context_base.h

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CHROME_BROWSER_PERMISSIONS_PERMISSION_CONTEXT_BASE_H_
 #define CHROME_BROWSER_PERMISSIONS_PERMISSION_CONTEXT_BASE_H_
 
 #include <memory>
 
 #include "base/callback_forward.h"
 #include "base/containers/scoped_ptr_hash_map.h"
 #include "base/memory/weak_ptr.h"
 #include "build/build_config.h"
 #include "chrome/browser/permissions/permission_request.h"
+#include "chrome/browser/safe_browsing/safe_browsing_service.h"

[dominickn, 2016/12/07 04:34:29]

Nit: I don't think you need this include in this file.

[meredithl, 2016/12/07 06:37:11]

Done.

 #include "components/content_settings/core/common/content_settings.h"
 #include "components/content_settings/core/common/content_settings_types.h"
 #include "components/keyed_service/core/keyed_service.h"
+#include "components/safe_browsing_db/database_manager.h"
 #include "content/public/browser/permission_type.h"
 
 #if defined(OS_ANDROID)
 class PermissionQueueController;
 #endif
 class GURL;
 class PermissionRequestID;
 class Profile;
 
 namespace content {
@@ skipping 45 matching lines @@
 
   // The renderer is requesting permission to push messages.
   // When the answer to a permission request has been determined, |callback|
   // should be called with the result.
   virtual void RequestPermission(content::WebContents* web_contents,
                                  const PermissionRequestID& id,
                                  const GURL& requesting_frame,
                                  bool user_gesture,
                                  const BrowserPermissionCallback& callback);
 
+  // The requesting origin and permission have been checked by Safe Browsing

[dominickn, 2016/12/07 04:34:29]

Nit: update the first sentence of this comment to read:

"Called when the requesting origin and permission have been checked by Safe
Browsing.

[meredithl, 2016/12/07 06:37:11]

Done.

+  // The result determines whether to auto-block the permission request without
+  // prompting the user for a decision.
+  void CheckPermissionsBlacklistResult(
+      content::WebContents* web_contents,
+      const PermissionRequestID& id,
+      const GURL& requesting_origin,
+      const GURL& embedding_origin,
+      bool user_gesture,
+      const BrowserPermissionCallback& callback,
+      bool result);

[dominickn, 2016/12/07 04:34:29]

Nit: "result" is a little vague. Perhaps change it to "blocked_by_sb" or
"permission_blocked"?

[meredithl, 2016/12/07 06:37:11]

Done.

+
   // Returns whether the permission has been granted, denied...
   virtual ContentSetting GetPermissionStatus(
       const GURL& requesting_origin,
       const GURL& embedding_origin) const;
 
   // Resets the permission to its default value.
   virtual void ResetPermission(const GURL& requesting_origin,
                                const GURL& embedding_origin);
 
   // Withdraw an existing permission request, no op if the permission request
@@ skipping 55 matching lines @@
                                     ContentSetting content_setting);
 
   // Whether the permission should be restricted to secure origins.
   virtual bool IsRestrictedToSecureOrigins() const = 0;
 
   content::PermissionType permission_type() const { return permission_type_; }
   ContentSettingsType content_settings_type() const {
     return content_settings_type_;
   }
 
+  // Virtual to allow for mocking in tests.
+  virtual scoped_refptr<safe_browsing::SafeBrowsingDatabaseManager>
+  GetSafeBrowsingDatabaseManager();
+
  private:
   friend class PermissionContextBaseTests;
 
   // Called when a request is no longer used so it can be cleaned up.
   void CleanUpRequest(const PermissionRequestID& id);
 
   Profile* profile_;
   const content::PermissionType permission_type_;
   const ContentSettingsType content_settings_type_;
 #if defined(OS_ANDROID)
   std::unique_ptr<PermissionQueueController> permission_queue_controller_;
 #endif
   base::ScopedPtrHashMap<std::string, std::unique_ptr<PermissionRequest>>
       pending_requests_;
 
   // Must be the last member, to ensure that it will be
   // destroyed first, which will invalidate weak pointers
   base::WeakPtrFactory<PermissionContextBase> weak_factory_;
 };
 
 #endif  // CHROME_BROWSER_PERMISSIONS_PERMISSION_CONTEXT_BASE_H_