Experimentally isolate GetOpenFileName in a utility process.

chrome/browser/chrome_select_file_dialog_factory_win.h

+// Copyright (c) 2014 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#ifndef CHROME_BROWSER_CHROME_SELECT_FILE_DIALOG_FACTORY_WIN_H_
+#define CHROME_BROWSER_CHROME_SELECT_FILE_DIALOG_FACTORY_WIN_H_
+
+#include "base/compiler_specific.h"
+#include "base/macros.h"
+#include "base/memory/ref_counted.h"
+#include "ui/shell_dialogs/select_file_dialog_factory.h"
+
+namespace base {
+class SequencedTaskRunner;
+}  // namespace base
+
+// Implements a Select File dialog that delegates to a Metro file picker on
+// Metro and to a utility process otherwise. The utility process is used in
+// order to isolate the Chrome browser process from potential instability
+// caused by Shell extension modules loaded by GetOpenFileName.
+class ChromeSelectFileDialogFactory : public ui::SelectFileDialogFactory {
+ public:
+  // Uses |blocking_task_runner| to perform IPC with the utility process.
+  explicit ChromeSelectFileDialogFactory(
+      const scoped_refptr<base::SequencedTaskRunner>& blocking_task_runner);
+  virtual ~ChromeSelectFileDialogFactory();
+
+  // ui::SelectFileDialogFactory implementation
+  virtual ui::SelectFileDialog* Create(ui::SelectFileDialog::Listener* listener,
+                                       ui::SelectFilePolicy* policy) OVERRIDE;
+
+ private:
+  scoped_refptr<base::SequencedTaskRunner> blocking_task_runner_;
+
+  DISALLOW_COPY_AND_ASSIGN(ChromeSelectFileDialogFactory);
+};
+
+#endif  // CHROME_BROWSER_CHROME_SELECT_FILE_DIALOG_FACTORY_WIN_H_