Add a browser test for access control for file: scheme

chrome/browser/net/chrome_network_delegate.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/net/chrome_network_delegate.h"
 
 #include <stddef.h>
 #include <stdlib.h>
 
 #include <vector>
@@ skipping 64 matching lines @@
 #if BUILDFLAG(ENABLE_EXTENSIONS)
 #include "extensions/common/constants.h"
 #endif
 
 using content::BrowserThread;
 using content::RenderViewHost;
 using content::ResourceRequestInfo;
 
 namespace {
 
+bool g_access_to_all_files_enabled = false;
+
 const char kDNTHeader[] = "DNT";
 
 // Gets called when the extensions finish work on the URL. If the extensions
 // did not do a redirect (so |new_url| is empty) then we enforce the
 // SafeSearch parameters. Otherwise we will get called again after the
 // redirect and we enforce SafeSearch then.
 void ForceGoogleSafeSearchCallbackWrapper(
     const net::CompletionCallback& callback,
     net::URLRequest* request,
     GURL* new_url,
@@ skipping 349 matching lines @@
                        !allow));
   }
 
   return allow;
 }
 
 bool ChromeNetworkDelegate::OnCanAccessFile(
     const net::URLRequest& request,
     const base::FilePath& original_path,
     const base::FilePath& absolute_path) const {
-#if defined(OS_CHROMEOS)
-  // browser_tests and interactive_ui_tests rely on the ability to open any
-  // files via file: scheme.
-  if (base::CommandLine::ForCurrentProcess()->HasSwitch(switches::kTestType))
+  if (g_access_to_all_files_enabled)
     return true;
-#endif
 
 #if defined(OS_ANDROID)
   // Android's whitelist relies on symbolic links (ex. /sdcard is whitelisted
   // and commonly a symbolic link), thus do not check absolute paths.
   return IsAccessAllowed(original_path, profile_path_);
 #else
   return (IsAccessAllowed(original_path, profile_path_) &&
           IsAccessAllowed(absolute_path, profile_path_));
 #endif
 }
@@ skipping 57 matching lines @@
         whitelisted_path.IsParent(path)) {
       return true;
     }
   }
 
   DVLOG(1) << "File access denied - " << path.value().c_str();
   return false;
 #endif  // !defined(OS_CHROMEOS) && !defined(OS_ANDROID)
 }
 
+// static
+void ChromeNetworkDelegate::EnableAccessToAllFilesForTesting(bool enabled) {
+  g_access_to_all_files_enabled = enabled;
+}
+
 bool ChromeNetworkDelegate::OnCanEnablePrivacyMode(
     const GURL& url,
     const GURL& first_party_for_cookies) const {
   // nullptr during tests, or when we're running in the system context.
   if (!cookie_settings_.get())
     return false;
 
   return !cookie_settings_->IsCookieAccessAllowed(url, first_party_for_cookies);
 }
 
@@ skipping 51 matching lines @@
   if (!data_use_aggregator_)
     return;
 
   if (is_data_usage_off_the_record_) {
     data_use_aggregator_->ReportOffTheRecordDataUse(tx_bytes, rx_bytes);
     return;
   }
 
   data_use_aggregator_->ReportDataUse(request, tx_bytes, rx_bytes);
 }