Implement a ResourceThrottle for URL overriding in Chrome on Android.

content/public/browser/render_view_host.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CONTENT_PUBLIC_BROWSER_RENDER_VIEW_HOST_H_
 #define CONTENT_PUBLIC_BROWSER_RENDER_VIEW_HOST_H_
 #pragma once
 
 #include "base/values.h"
 #include "content/common/content_export.h"
@@ skipping 15 matching lines @@
 }
 
 namespace WebKit {
 struct WebFindOptions;
 struct WebMediaPlayerAction;
 struct WebPluginAction;
 }
 
 namespace content {
 
+class ChildProcessSecurityPolicy;
 class RenderViewHostDelegate;
 class SessionStorageNamespace;
 class SiteInstance;
 struct CustomContextMenuContext;
 struct SelectedFileInfo;
 
 // A RenderViewHost is responsible for creating and talking to a RenderView
 // object in a child process. It exposes a high level API to users, for things
 // like loading pages, adjusting the display and other browser functionality,
 // which it translates into IPC messages sent over the IPC channel with the
 // RenderView. It responds to all IPC messages sent by that RenderView and
 // cracks them, calling a delegate object back with higher level types where
 // possible.
 //
 // The intent of this interface is to provide a view-agnostic communication
 // conduit with a renderer. This is so we can build HTML views not only as
 // WebContents (see WebContents for an example) but also as views, etc.
 class CONTENT_EXPORT RenderViewHost : virtual public RenderWidgetHost {
  public:
   // Returns the RenderViewHost given its ID and the ID of its render process.
   // Returns NULL if the IDs do not correspond to a live RenderViewHost.
   static RenderViewHost* FromID(int render_process_id, int render_view_id);
 
   // Downcasts from a RenderWidgetHost to a RenderViewHost.  Required
   // because RenderWidgetHost is a virtual base class.
   static RenderViewHost* From(RenderWidgetHost* rwh);
 
+  // Checks that the given renderer can request |url|, if not it sets it to
+  // about:blank.
+  // empty_allowed must be set to false for navigations for security reasons.
+  static void FilterURL(ChildProcessSecurityPolicy* policy,

[darin (slow to review), 2012/06/01 20:57:41]

it seems like you shouldn't bother with the policy argument here.  FilterURL can
just call ChildProcessSecurityPolicyImpl::GetInstance().

then you would not need to expose the CanRequestURL method on the public
ChildProcessSecurityPolicy interface.

[mkosiba (inactive), 2012/06/06 16:11:20]

Done.

+                        int renderer_id,
+                        bool empty_allowed,
+                        GURL* url);
+
   virtual ~RenderViewHost() {}
 
   // Tell the render view to enable a set of javascript bindings. The argument
   // should be a combination of values from BindingsPolicy.
   virtual void AllowBindings(int binding_flags) = 0;
 
   // Tells the renderer to clear the focused node (if any).
   virtual void ClearFocusedNode() = 0;
 
   // Causes the renderer to close the current page, including running its
@@ skipping 182 matching lines @@
   virtual webkit_glue::WebPreferences GetWebkitPreferences() = 0;
 
   // Passes a list of Webkit preferences to the renderer.
   virtual void UpdateWebkitPreferences(
       const webkit_glue::WebPreferences& prefs) = 0;
 };
 
 }  // namespace content
 
 #endif  // CONTENT_PUBLIC_BROWSER_RENDER_VIEW_HOST_H_