Block platform verification and file IO in the CDM adapter if the CDM configuration disallows them.

media/cdm/proxy_decryptor.cc

Index: media/cdm/proxy_decryptor.cc
diff --git a/media/cdm/proxy_decryptor.cc b/media/cdm/proxy_decryptor.cc
index d1be9d8b204fe2b99d4dbf3a368cc733ea8af852..b284f18e88844362c99e566bba2cdd0dd564ecaf 100644
--- a/media/cdm/proxy_decryptor.cc
+++ b/media/cdm/proxy_decryptor.cc
@@ -198,6 +198,8 @@ scoped_ptr<MediaKeys> ProxyDecryptor::CreateMediaKeys(
   base::WeakPtr<ProxyDecryptor> weak_this = weak_ptr_factory_.GetWeakPtr();
   return cdm_factory->Create(
       key_system,
+      true,  // Prefixed always requires permission, and always allows

[ddorwin, 2015/03/06 21:42:54]

This will DCHECK for AesDecryptor - or at least it will if you add those
DCHECKs. Perhaps a TODO there?
Also, aren't we moving the permission check here at some point? Perhaps TODO to
use the result of that (crbug.com/455271).

[sandersd (OOO until July 31), 2015/03/06 22:36:58]

Done.

+      true,  // distinctive identifiers and persistent state.
       security_origin,
       base::Bind(&ProxyDecryptor::OnSessionMessage, weak_this),
       base::Bind(&ProxyDecryptor::OnSessionClosed, weak_this),