Always prompt for permission on fullscreen and mouse lock on file:// URLs

chrome/browser/ui/exclusive_access/mouse_lock_controller.cc

 // Copyright (c) 2015 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/ui/exclusive_access/mouse_lock_controller.h"
 
 #include "chrome/browser/chrome_notification_types.h"
 #include "chrome/browser/profiles/profile.h"
 #include "chrome/browser/ui/browser.h"
 #include "chrome/browser/ui/exclusive_access/fullscreen_controller.h"
@@ skipping 204 matching lines @@
     RenderViewHost* const rvh = exclusive_access_tab()->GetRenderViewHost();
     if (rvh)
       mouse_lock_view = rvh->GetView();
   }
 
   if (mouse_lock_view)
     mouse_lock_view->UnlockMouse();
 }
 
 ContentSetting MouseLockController::GetMouseLockSetting(const GURL& url) const {
+  // For file:// URLs, asking for permission would not be meaningful:
+  // the preference could be saved for the whole file:// origin, which
+  // is overly permissive, or for an individual file:// URL, which would
+  // not be meaningful because file:// URLs share an origin. So the only
+  // option is to block. This can be revisited when crbug.com/455882 is
+  // fixed.
+  if (url.SchemeIsFile())
+    return CONTENT_SETTING_BLOCK;

[meacer, 2015/02/10 01:47:21]

Blocking this outright makes the fullscreen and pointer lock permissions in the
page info bubble moot for file:// urls, but I guess that's OK for now.

+
   if (exclusive_access_manager()
           ->fullscreen_controller()
-          ->IsPrivilegedFullscreenForTab() ||
-      url.SchemeIsFile())
+          ->IsPrivilegedFullscreenForTab())
     return CONTENT_SETTING_ALLOW;
 
   HostContentSettingsMap* settings_map = profile()->GetHostContentSettingsMap();
   return settings_map->GetContentSetting(
       url, url, CONTENT_SETTINGS_TYPE_MOUSELOCK, std::string());
 }