PPAPI: Whitelist PPB_CameraDevice_Private for some apps

content/renderer/pepper/content_renderer_pepper_host_factory.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "content/renderer/pepper/content_renderer_pepper_host_factory.h"
 
 #include "base/logging.h"
 #include "base/strings/string_util.h"
 #include "content/common/content_switches_internal.h"
 #include "content/public/common/content_client.h"
@@ skipping 44 matching lines @@
   if (!container)
     return false;
 
   GURL document_url = container->element().document().url();
   ContentRendererClient* content_renderer_client =
       GetContentClient()->renderer();
   return content_renderer_client->AllowPepperMediaStreamAPI(document_url);
 }
 #endif  // defined(ENABLE_WEBRTC)
 
+static bool CanUseCameraDeviceAPI(const RendererPpapiHost* host,
+                                  PP_Instance instance) {
+  blink::WebPluginContainer* container =
+      host->GetContainerForInstance(instance);
+  if (!container)
+    return false;
+
+  GURL document_url = container->element().document().url();
+  ContentRendererClient* content_renderer_client =
+      GetContentClient()->renderer();
+  return content_renderer_client->IsPluginAllowedToUseCameraDeviceAPI(
+      document_url);
+}
+
 bool CanUseCompositorAPI(const RendererPpapiHost* host, PP_Instance instance) {
   blink::WebPluginContainer* container =
       host->GetContainerForInstance(instance);
   if (!container)
     return false;
 
   GURL document_url = container->element().document().url();
   ContentRendererClient* content_renderer_client =
       GetContentClient()->renderer();
   return content_renderer_client->IsPluginAllowedToUseCompositorAPI(
@@ skipping 123 matching lines @@
             new PepperVideoCaptureHost(host_, instance, resource);
         if (!host->Init()) {
           delete host;
           return scoped_ptr<ResourceHost>();
         }
         return scoped_ptr<ResourceHost>(host);
       }
     }
   }
 
-  // Private interfaces.
-  if (GetPermissions().HasPermission(ppapi::PERMISSION_PRIVATE)) {
-    switch (message.type()) {
-      case PpapiHostMsg_CameraDevice_Create::ID: {
-        scoped_ptr<PepperCameraDeviceHost> host(
-            new PepperCameraDeviceHost(host_, instance, resource));
-        return host->Init() ? host.Pass() : nullptr;
-      }
-    }
+  // Permissions of the following interfaces are available for whitelisted apps
+  // which may not have access to the other private interfaces.
+  if (message.type() == PpapiHostMsg_CameraDevice_Create::ID) {
+    if (!GetPermissions().HasPermission(ppapi::PERMISSION_PRIVATE) &&
+        !CanUseCameraDeviceAPI(host_, instance))
+      return nullptr;
+    scoped_ptr<PepperCameraDeviceHost> host(
+        new PepperCameraDeviceHost(host_, instance, resource));
+    return host->Init() ? host.Pass() : nullptr;
   }
 
   return scoped_ptr<ResourceHost>();
 }
 
 const ppapi::PpapiPermissions&
 ContentRendererPepperHostFactory::GetPermissions() const {
   return host_->GetPpapiHost()->permissions();
 }
 
 }  // namespace content