Implement feature policy checks in the browser process

chrome/browser/permissions/permission_context_base.h

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CHROME_BROWSER_PERMISSIONS_PERMISSION_CONTEXT_BASE_H_
 #define CHROME_BROWSER_PERMISSIONS_PERMISSION_CONTEXT_BASE_H_
 
 #include <memory>
 #include <unordered_map>
 
 #include "base/callback_forward.h"
 #include "base/memory/weak_ptr.h"
 #include "build/build_config.h"
 #include "chrome/browser/permissions/permission_request.h"
 #include "chrome/browser/permissions/permission_result.h"
 #include "components/content_settings/core/common/content_settings.h"
 #include "components/content_settings/core/common/content_settings_types.h"
 #include "components/keyed_service/core/keyed_service.h"
+#include "third_party/WebKit/public/platform/WebFeaturePolicyFeature.h"
 
 #if defined(OS_ANDROID)
 class PermissionQueueController;
 #endif
 class GURL;
 class PermissionRequestID;
 class Profile;
 
 namespace content {
 class RenderFrameHost;
@@ skipping 22 matching lines @@
 // After this you can override several other methods to customize behavior,
 // in particular it is advised to override UpdateTabContext in order to manage
 // the permission from the omnibox.
 // It is mandatory to override IsRestrictedToSecureOrigin.
 // See midi_permission_context.h/cc or push_permission_context.cc/h for some
 // examples.
 
 class PermissionContextBase : public KeyedService {
  public:
   PermissionContextBase(Profile* profile,
-                        const ContentSettingsType content_settings_type);
+                        ContentSettingsType content_settings_type,
+                        blink::WebFeaturePolicyFeature feature_policy_feature);
   ~PermissionContextBase() override;
 
   // A field trial used to enable the global permissions kill switch.
   // This is public so permissions that don't yet inherit from
   // PermissionContextBase can use it.
   static const char kPermissionsKillSwitchFieldStudy[];
 
   // The field trial param to enable the global permissions kill switch.
   // This is public so permissions that don't yet inherit from
   // PermissionContextBase can use it.
@@ skipping 101 matching lines @@
   }
 
   // TODO(timloh): The CONTENT_SETTINGS_TYPE_NOTIFICATIONS type is used to
   // store both push messaging and notifications permissions. Remove this
   // once we've unified these types (crbug.com/563297).
   ContentSettingsType content_settings_storage_type() const;
 
  private:
   friend class PermissionContextBaseTests;
 
+  bool PermissionAllowedByFeaturePolicy(content::RenderFrameHost* rfh) const;
+
   // Called when a request is no longer used so it can be cleaned up.
   void CleanUpRequest(const PermissionRequestID& id);
 
   // Called when the requesting origin and permission have been checked by Safe
   // Browsing. |permission_blocked| determines whether to auto-block the
   // permission request without prompting the user for a decision.
   void ContinueRequestPermission(content::WebContents* web_contents,
                                  const PermissionRequestID& id,
                                  const GURL& requesting_origin,
                                  const GURL& embedding_origin,
                                  bool user_gesture,
                                  const BrowserPermissionCallback& callback,
                                  bool permission_blocked);
 
   // Called when the user has made a permission decision. This is a hook for
   // descendent classes to do appropriate things they might need to do when this
   // happens.
   virtual void UserMadePermissionDecision(const PermissionRequestID& id,
                                           const GURL& requesting_origin,
                                           const GURL& embedding_origin,
                                           ContentSetting content_setting);
 
   Profile* profile_;
   const ContentSettingsType content_settings_type_;
+  const blink::WebFeaturePolicyFeature feature_policy_feature_;
 #if defined(OS_ANDROID)
   std::unique_ptr<PermissionQueueController> permission_queue_controller_;
 #endif
   std::unordered_map<std::string, std::unique_ptr<PermissionRequest>>
       pending_requests_;
 
   // Must be the last member, to ensure that it will be
   // destroyed first, which will invalidate weak pointers
   base::WeakPtrFactory<PermissionContextBase> weak_factory_;
 };
 
 #endif  // CHROME_BROWSER_PERMISSIONS_PERMISSION_CONTEXT_BASE_H_