Implement clipboardRead/Write content capabilities

extensions/renderer/script_context.cc

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "extensions/renderer/script_context.h"
 
 #include "base/logging.h"
 #include "base/memory/scoped_ptr.h"
 #include "base/strings/string_split.h"
 #include "base/strings/string_util.h"
 #include "base/values.h"
 #include "content/public/common/url_constants.h"
 #include "content/public/renderer/render_frame.h"
 #include "content/public/renderer/render_view.h"
 #include "content/public/renderer/v8_value_converter.h"
 #include "extensions/common/extension.h"
 #include "extensions/common/extension_api.h"
 #include "extensions/common/extension_urls.h"
 #include "extensions/common/features/base_feature_provider.h"
+#include "extensions/common/permissions/permissions_data.h"
 #include "gin/per_context_data.h"
 #include "third_party/WebKit/public/web/WebDataSource.h"
 #include "third_party/WebKit/public/web/WebDocument.h"
 #include "third_party/WebKit/public/web/WebFrame.h"
 #include "third_party/WebKit/public/web/WebScopedMicrotaskSuppression.h"
 #include "third_party/WebKit/public/web/WebSecurityOrigin.h"
 #include "third_party/WebKit/public/web/WebView.h"
 #include "v8/include/v8.h"
 
 using content::V8ValueConverter;
@@ skipping 236 matching lines @@
                                           int argc,
                                           v8::Handle<v8::Value> argv[]) {
   return CallFunction(function, argc, argv);
 }
 
 gin::ContextHolder* ScriptContext::GetContextHolder() {
   v8::HandleScope handle_scope(isolate());
   return gin::PerContextData::From(v8_context())->context_holder();
 }
 
+void ScriptContext::SetContentCapabilities(
+    const APIPermissionSet& permissions) {
+  content_capabilities_ = permissions;
+}
+
+bool ScriptContext::HasContentCapability(APIPermission::ID permission) const {
+  if (context_type() != Feature::WEB_PAGE_CONTEXT)
+    // Only web page contexts may be granted content capabilities. Other
+    // contexts are either privileged WebUI or extensions with their own set of
+    // permissions.
+    return false;

[not at google - send to devlin, 2014/12/10 22:11:34]

I would prefer if you surround this comment+body in curlies. It's many lines.

+  if (content_capabilities_.find(permission) != content_capabilities_.end())
+    return true;
+  if (effective_extension_.get()) {
+    return effective_extension_->permissions_data()->HasAPIPermission(
+        permission);
+  }
+  return false;
+}
+
 }  // namespace extensions