chromeos: Check both original and absolute paths for file: scheme

net/url_request/url_request_file_job.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef NET_URL_REQUEST_URL_REQUEST_FILE_JOB_H_
 #define NET_URL_REQUEST_URL_REQUEST_FILE_JOB_H_
 
 #include <stdint.h>
 
 #include <memory>
@@ skipping 54 matching lines @@
 
   // URLRequestJob implementation.
   std::unique_ptr<SourceStream> SetUpSourceStream() override;
 
   int64_t remaining_bytes() const { return remaining_bytes_; }
 
   // The OS-specific full path name of the file
   base::FilePath file_path_;
 
  private:
+  // This class checks if a path is accessible via file: scheme, with
+  // NetworkDelegate. Subclasses can disable the check if needed.
+  virtual bool CanAccessFile(const base::FilePath& original_path,
+                             const base::FilePath& absolute_path);
+
   // Meta information about the file. It's used as a member in the
   // URLRequestFileJob and also passed between threads because disk access is
   // necessary to obtain it.
   struct FileMetaInfo {
     FileMetaInfo();
 
     // Size of the file.
     int64_t file_size;
     // Mime type associated with the file.
     std::string mime_type;
     // Result returned from GetMimeTypeFromFile(), i.e. flag showing whether
     // obtaining of the mime type was successful.
     bool mime_type_result;
     // Flag showing whether the file exists.
     bool file_exists;
     // Flag showing whether the file name actually refers to a directory.
     bool is_directory;
+    // Absolute path of the file (i.e. symbolic link is resolved).
+    base::FilePath absolute_path;
   };
 
   // Fetches file info on a background thread.
   static void FetchMetaInfo(const base::FilePath& file_path,
                             FileMetaInfo* meta_info);
 
   // Callback after fetching file info on a background thread.
   void DidFetchMetaInfo(const FileMetaInfo* meta_info);
 
   // Callback after opening file on a background thread.
@@ skipping 17 matching lines @@
   Error range_parse_result_;
 
   base::WeakPtrFactory<URLRequestFileJob> weak_ptr_factory_;
 
   DISALLOW_COPY_AND_ASSIGN(URLRequestFileJob);
 };
 
 }  // namespace net
 
 #endif  // NET_URL_REQUEST_URL_REQUEST_FILE_JOB_H_