| OLD | NEW |
| 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #ifndef CONTENT_PUBLIC_BROWSER_CHILD_PROCESS_SECURITY_POLICY_H_ | 5 #ifndef CONTENT_PUBLIC_BROWSER_CHILD_PROCESS_SECURITY_POLICY_H_ |
| 6 #define CONTENT_PUBLIC_BROWSER_CHILD_PROCESS_SECURITY_POLICY_H_ | 6 #define CONTENT_PUBLIC_BROWSER_CHILD_PROCESS_SECURITY_POLICY_H_ |
| 7 | 7 |
| 8 #include <string> | 8 #include <string> |
| 9 | 9 |
| 10 #include "base/basictypes.h" | 10 #include "base/basictypes.h" |
| (...skipping 52 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 63 // Before servicing a child process's request to upload a file to the web, the | 63 // Before servicing a child process's request to upload a file to the web, the |
| 64 // browser should call this method to determine whether the process has the | 64 // browser should call this method to determine whether the process has the |
| 65 // capability to upload the requested file. | 65 // capability to upload the requested file. |
| 66 virtual bool CanReadFile(int child_id, const base::FilePath& file) = 0; | 66 virtual bool CanReadFile(int child_id, const base::FilePath& file) = 0; |
| 67 virtual bool CanCreateReadWriteFile(int child_id, | 67 virtual bool CanCreateReadWriteFile(int child_id, |
| 68 const base::FilePath& file) = 0; | 68 const base::FilePath& file) = 0; |
| 69 | 69 |
| 70 // Grants read access permission to the given isolated file system | 70 // Grants read access permission to the given isolated file system |
| 71 // identified by |filesystem_id|. An isolated file system can be | 71 // identified by |filesystem_id|. An isolated file system can be |
| 72 // created for a set of native files/directories (like dropped files) | 72 // created for a set of native files/directories (like dropped files) |
| 73 // using fileapi::IsolatedContext. A child process needs to be granted | 73 // using storage::IsolatedContext. A child process needs to be granted |
| 74 // permission to the file system to access the files in it using | 74 // permission to the file system to access the files in it using |
| 75 // file system URL. You do NOT need to give direct permission to | 75 // file system URL. You do NOT need to give direct permission to |
| 76 // individual file paths. | 76 // individual file paths. |
| 77 // | 77 // |
| 78 // Note: files/directories in the same file system share the same | 78 // Note: files/directories in the same file system share the same |
| 79 // permission as far as they are accessed via the file system, i.e. | 79 // permission as far as they are accessed via the file system, i.e. |
| 80 // using the file system URL (tip: you can create a new file system | 80 // using the file system URL (tip: you can create a new file system |
| 81 // to give different permission to part of files). | 81 // to give different permission to part of files). |
| 82 virtual void GrantReadFileSystem(int child_id, | 82 virtual void GrantReadFileSystem(int child_id, |
| 83 const std::string& filesystem_id) = 0; | 83 const std::string& filesystem_id) = 0; |
| (...skipping 64 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 148 | 148 |
| 149 // Returns true if the specified child_id has been granted WebUI bindings. | 149 // Returns true if the specified child_id has been granted WebUI bindings. |
| 150 // The browser should check this property before assuming the child process | 150 // The browser should check this property before assuming the child process |
| 151 // is allowed to use WebUI bindings. | 151 // is allowed to use WebUI bindings. |
| 152 virtual bool HasWebUIBindings(int child_id) = 0; | 152 virtual bool HasWebUIBindings(int child_id) = 0; |
| 153 }; | 153 }; |
| 154 | 154 |
| 155 } // namespace content | 155 } // namespace content |
| 156 | 156 |
| 157 #endif // CONTENT_PUBLIC_BROWSER_CHILD_PROCESS_SECURITY_POLICY_H_ | 157 #endif // CONTENT_PUBLIC_BROWSER_CHILD_PROCESS_SECURITY_POLICY_H_ |
| OLD | NEW |