Experimentally isolate GetOpenFileName in a utility process.

chrome/browser/chrome_select_file_dialog_factory_win.h

+// Copyright (c) 2014 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#ifndef CHROME_BROWSER_CHROME_SELECT_FILE_DIALOG_FACTORY_WIN_H_
+#define CHROME_BROWSER_CHROME_SELECT_FILE_DIALOG_FACTORY_WIN_H_
+
+#include "base/compiler_specific.h"
+#include "base/macros.h"
+#include "base/memory/ref_counted.h"
+#include "ui/shell_dialogs/select_file_dialog_factory.h"
+
+namespace base {
+class SequencedTaskRunner;
+}  // namespace base
+
+// Implements a Select File dialog that delegates to a Metro file picker on
+// Metro and to a utility process otherwise. The utility process is used in
+// order to isolate the Chrome browser process from potential instability
+// caused by Shell extension modules loaded by GetOpenFileName.
+class ChromeSelectFileDialogFactory : public ui::SelectFileDialogFactory {
+   public:

[sky, 2014/07/31 20:47:46]

nit: spacing is off.

[erikwright (departed), 2014/08/01 13:53:15]

Done.

+    // Uses |blocking_task_runner| to perform IPC with the utility process.
+    explicit ChromeSelectFileDialogFactory(
+        const scoped_refptr<base::SequencedTaskRunner>& blocking_task_runner);
+    virtual ~ChromeSelectFileDialogFactory();
+
+    // ui::SelectFileDialogFactory implementation
+    virtual ui::SelectFileDialog* Create(
+        ui::SelectFileDialog::Listener* listener,
+        ui::SelectFilePolicy* policy) OVERRIDE;
+
+   private:
+    scoped_refptr<base::SequencedTaskRunner> blocking_task_runner_;
+
+    DISALLOW_COPY_AND_ASSIGN(ChromeSelectFileDialogFactory);
+};
+
+#endif  // CHROME_BROWSER_CHROME_SELECT_FILE_DIALOG_FACTORY_WIN_H_