Fix chrome upload with content uri

content/public/browser/child_process_security_policy.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CONTENT_PUBLIC_BROWSER_CHILD_PROCESS_SECURITY_POLICY_H_
 #define CONTENT_PUBLIC_BROWSER_CHILD_PROCESS_SECURITY_POLICY_H_
 
 #include <string>
 
 #include "base/basictypes.h"
 #include "content/common/content_export.h"
 
+#if defined(OS_ANDROID)
+#include "url/gurl.h"
+#endif
+
 namespace base {
 class FilePath;
 }
 
 namespace content {
 
 // The ChildProcessSecurityPolicy class is used to grant and revoke security
 // capabilities for child processes.  For example, it restricts whether a child
 // process is permitted to load file:// URLs based on whether the process
 // has ever been commanded to load file:// URLs by the browser.
@@ skipping 102 matching lines @@
   virtual bool CanReadWriteFileSystem(int child_id,
                                       const std::string& filesystem_id) = 0;
 
   // Returns true if copy-into access has been granted to |filesystem_id|.
   virtual bool CanCopyIntoFileSystem(int child_id,
                                      const std::string& filesystem_id) = 0;
 
   // Returns true if delete-from access has been granted to |filesystem_id|.
   virtual bool CanDeleteFromFileSystem(int child_id,
                                        const std::string& filesystem_id) = 0;
+
+#if defined(OS_ANDROID)
+  // This permission grants only read access to a content url.
+  // Whenever the user picks a content url file from a <input type="file">
+  // element, the browser should call this function to grant the child process
+  // the capability to upload the file to the web. Grants
+  // FILE_PERMISSION_READ_ONLY.
+  virtual void GrantReadContentUrl(int child_id,
+                                   const GURL& content_url) = 0;
+
+  // Before servicing a child process's request to upload a file to the web, the
+  // browser should call this method to determine whether the process has the
+  // capability to upload the requested file.
+  virtual bool CanReadContentUrl(int child_id,
+                                 const GURL& content_url) = 0;
+#endif
 };
 
 };  // namespace content
 
 #endif  // CONTENT_PUBLIC_BROWSER_CHILD_PROCESS_SECURITY_POLICY_H_