Add a new group policy to disable safe browsing for files downloaded from trusted sources.

chrome/browser/download/download_prefs.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CHROME_BROWSER_DOWNLOAD_DOWNLOAD_PREFS_H_
 #define CHROME_BROWSER_DOWNLOAD_DOWNLOAD_PREFS_H_
 
+#include <memory>
 #include <set>
 
 #include "base/files/file_path.h"
 #include "base/macros.h"
 #include "build/build_config.h"
 #include "components/prefs/pref_member.h"
 
 class Profile;
+class TrustedSourcesManager;
 
 namespace content {
 class BrowserContext;
+class DownloadItem;
 class DownloadManager;
 }
 
 namespace user_prefs {
 class PrefRegistrySyncable;
 }
 
 // Stores all download-related preferences.
 class DownloadPrefs {
  public:
@@ skipping 14 matching lines @@
   // Returns the default download directory for the current profile.
   base::FilePath GetDefaultDownloadDirectoryForProfile() const;
 
   // Returns the DownloadPrefs corresponding to the given DownloadManager
   // or BrowserContext.
   static DownloadPrefs* FromDownloadManager(
       content::DownloadManager* download_manager);
   static DownloadPrefs* FromBrowserContext(
       content::BrowserContext* browser_context);
 
+  // Identify whether the downloaded item was downloaded from a trusted source.
+  bool IsFromTrustedSource(const content::DownloadItem& item);
+
   base::FilePath DownloadPath() const;
   void SetDownloadPath(const base::FilePath& path);
   base::FilePath SaveFilePath() const;
   void SetSaveFilePath(const base::FilePath& path);
   int save_file_type() const { return *save_file_type_; }
   void SetSaveFileType(int type);
   DownloadRestriction download_restriction() const {
     return static_cast<DownloadRestriction>(*download_restriction_);
   }
+  bool safebrowsing_for_trusted_sources_enabled() const {
+    return *safebrowsing_for_trusted_sources_enabled_;
+  }
 
   // Returns true if the prompt_for_download preference has been set and the
   // download location is not managed (which means the user shouldn't be able
   // to choose another download location).
   bool PromptForDownload() const;
 
   // Returns true if the download path preference is managed.
   bool IsDownloadPathManaged() const;
 
   // Returns true if there is at least one file extension registered
@@ skipping 30 matching lines @@
  private:
   void SaveAutoOpenState();
 
   Profile* profile_;
 
   BooleanPrefMember prompt_for_download_;
   FilePathPrefMember download_path_;
   FilePathPrefMember save_file_path_;
   IntegerPrefMember save_file_type_;
   IntegerPrefMember download_restriction_;
+  BooleanPrefMember safebrowsing_for_trusted_sources_enabled_;
+
+  // To identify if a download URL is from a trusted source.
+  std::unique_ptr<TrustedSourcesManager> trusted_sources_manager_;
 
   // Set of file extensions to open at download completion.
   struct AutoOpenCompareFunctor {
     bool operator()(const base::FilePath::StringType& a,
                     const base::FilePath::StringType& b) const;
   };
   typedef std::set<base::FilePath::StringType,
                    AutoOpenCompareFunctor> AutoOpenSet;
   AutoOpenSet auto_open_;
 
 #if defined(OS_WIN) || defined(OS_LINUX) || defined(OS_MACOSX)
   bool should_open_pdf_in_system_reader_;
 #endif
 
   DISALLOW_COPY_AND_ASSIGN(DownloadPrefs);
 };
 
 #endif  // CHROME_BROWSER_DOWNLOAD_DOWNLOAD_PREFS_H_