Block content scripts from executing until user grants permission

chrome/browser/extensions/active_script_controller.cc

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/extensions/active_script_controller.h"
 
 #include "base/bind.h"
 #include "base/bind_helpers.h"
 #include "base/metrics/histogram.h"
 #include "base/stl_util.h"
@@ skipping 124 matching lines @@
 
   return LocationBarController::ACTION_NONE;
 }
 
 void ActiveScriptController::OnNavigated() {
   LogUMA();
   requesting_extensions_.clear();
   pending_requests_.clear();
 }
 
-void ActiveScriptController::OnNotifyExtensionScriptExecution(
+void ActiveScriptController::OnRequestContentScriptPermission(
     const std::string& extension_id,
-    int page_id) {
+    int page_id,
+    int request_id) {
   if (!Extension::IdIsValid(extension_id)) {
     NOTREACHED() << "'" << extension_id << "' is not a valid id.";
     return;
   }
 
+  // This base::Unretained() is safe, because this can only be called from
+  // itself.
   GetPermissionForInjection(
       extension_id,
       page_id,
-      scoped_ptr<const base::Closure>(
-          new base::Closure(base::Bind(&base::DoNothing))));
+      scoped_ptr<const base::Closure>(new base::Closure(
+          base::Bind(&ActiveScriptController::GrantContentScriptPermission,
+                     base::Unretained(this),
+                     request_id))));
+}
+
+void ActiveScriptController::GrantContentScriptPermission(int request_id) {
+  content::RenderViewHost* render_view_host =
+      web_contents()->GetRenderViewHost();
+  if (render_view_host) {
+    render_view_host->Send(new ExtensionMsg_GrantContentScriptPermission(
+                               render_view_host->GetRoutingID(),
+                               request_id));
+  }
 }
 
 void ActiveScriptController::AddOrProcessRequest(
     const Extension* extension,
     scoped_ptr<const base::Closure> request) {
   // If the extension does not require permissions, run it immediately.
   if (!PermissionsData::RequiresActionForScriptExecution(extension)) {
     request->Run();
     return;
   }
@@ skipping 13 matching lines @@
   // If this was the first entry, notify the location bar that there's a new
   // icon.
   if (list->size() == 1u)
     LocationBarController::NotifyChange(web_contents());
 
 }
 
 bool ActiveScriptController::OnMessageReceived(const IPC::Message& message) {
   bool handled = true;
   IPC_BEGIN_MESSAGE_MAP(ActiveScriptController, message)
-    IPC_MESSAGE_HANDLER(ExtensionHostMsg_NotifyExtensionScriptExecution,
-                        OnNotifyExtensionScriptExecution)
+    IPC_MESSAGE_HANDLER(ExtensionHostMsg_RequestContentScriptPermission,
+                        OnRequestContentScriptPermission)
     IPC_MESSAGE_UNHANDLED(handled = false)
   IPC_END_MESSAGE_MAP()
   return handled;
 }
 
 void ActiveScriptController::LogUMA() const {
   UMA_HISTOGRAM_COUNTS_100(
       "Extensions.ActiveScriptController.ShownActiveScriptsOnPage",
       pending_requests_.size());
 }
 
 }  // namespace extensions