Implement clipboardRead/Write content capabilities

extensions/renderer/script_context.cc

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "extensions/renderer/script_context.h"
 
 #include "base/logging.h"
 #include "base/memory/scoped_ptr.h"
 #include "base/strings/string_split.h"
 #include "base/strings/string_util.h"
 #include "base/values.h"
 #include "content/public/common/url_constants.h"
 #include "content/public/renderer/render_frame.h"
 #include "content/public/renderer/render_view.h"
 #include "content/public/renderer/v8_value_converter.h"
 #include "extensions/common/extension.h"
 #include "extensions/common/extension_api.h"
 #include "extensions/common/extension_urls.h"
 #include "extensions/common/features/base_feature_provider.h"
+#include "extensions/common/permissions/permissions_data.h"
 #include "gin/per_context_data.h"
 #include "third_party/WebKit/public/web/WebDataSource.h"
 #include "third_party/WebKit/public/web/WebDocument.h"
 #include "third_party/WebKit/public/web/WebFrame.h"
 #include "third_party/WebKit/public/web/WebScopedMicrotaskSuppression.h"
 #include "third_party/WebKit/public/web/WebSecurityOrigin.h"
 #include "third_party/WebKit/public/web/WebView.h"
 #include "v8/include/v8.h"
 
 using content::V8ValueConverter;
@@ skipping 236 matching lines @@
                                           int argc,
                                           v8::Handle<v8::Value> argv[]) {
   return CallFunction(function, argc, argv);
 }
 
 gin::ContextHolder* ScriptContext::GetContextHolder() {
   v8::HandleScope handle_scope(isolate());
   return gin::PerContextData::From(v8_context())->context_holder();
 }
 
+void ScriptContext::SetContentCapabilities(
+    const APIPermissionSet& permissions) {
+  content_capabilities_ = permissions;

[not at google - send to devlin, 2014/12/10 17:33:54]

Can you just make ScriptContext (lazily, I suppose) create content_capabilities_
internally, rather than requiring proxying through Dispatcher?

[Ken Rockot(use gerrit already), 2014/12/10 18:31:41]

What about handling the case where an extension (which grants
content_capabilities) is unloaded? That was the deciding motivation for doing
this through Dispatcher::UpdateBindings.

+}
+
+bool ScriptContext::HasEffectiveAPIPermission(
+    APIPermission::ID permission) const {
+  if (content_capabilities_.find(permission) != content_capabilities_.end())
+    return true;

[not at google - send to devlin, 2014/12/10 17:33:54]

Consider being a little conservative here, and checking that it's actually a web
context type as well.

+  if (effective_extension_.get()) {
+    return effective_extension_->permissions_data()->HasAPIPermission(
+        permission);
+  }
+  return false;
+}
+
 }  // namespace extensions