Change the permission check for Pepper socket API to support both the public and private APIs.

chrome/common/pepper_permission_util.cc

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/common/pepper_permission_util.h"
 
 #include <vector>
 
 #include "base/command_line.h"
 #include "base/sha1.h"
@@ skipping 19 matching lines @@
 
 bool HostIsInSet(const std::string& host, const std::set<std::string>& set) {
   return set.count(host) > 0 || set.count(HashHost(host)) > 0;
 }
 
 }  // namespace
 
 bool IsExtensionOrSharedModuleWhitelisted(
     const GURL& url,
     const ExtensionSet* extension_set,
-    const std::set<std::string>& whitelist,
-    const char* command_line_switch) {
-  const std::string host = url.host();
-  if (!url.is_valid())
+    const std::set<std::string>& whitelist) {
+  if (!url.is_valid() || !url.SchemeIs(extensions::kExtensionScheme))
     return false;
 
-  if (url.SchemeIs(extensions::kExtensionScheme) &&
-      HostIsInSet(host, whitelist)) {
+  const std::string host = url.host();
+  if (HostIsInSet(host, whitelist))
     return true;
-  }
 
   // Check the modules that are imported by this extension to see if any of them
   // is whitelisted.
   const Extension* extension = extension_set ? extension_set->GetByID(host)
                                              : NULL;
   if (extension) {
     typedef std::vector<extensions::SharedModuleInfo::ImportInfo>
         ImportInfoVector;
     const ImportInfoVector& imports =
         extensions::SharedModuleInfo::GetImports(extension);
     for (ImportInfoVector::const_iterator it = imports.begin();
          it != imports.end(); ++it) {
       const Extension* imported_extension = extension_set->GetByID(
           it->extension_id);
       if (imported_extension &&
           extensions::SharedModuleInfo::IsSharedModule(imported_extension) &&
           HostIsInSet(it->extension_id, whitelist)) {
         return true;
       }
     }
   }
 
+  return false;
+}
+
+bool IsHostAllowedByCommandLine(const GURL& url,
+                                const ExtensionSet* extension_set,
+                                const char* command_line_switch) {
+  if (!url.is_valid())
+    return false;
+
   const CommandLine& command_line = *CommandLine::ForCurrentProcess();
   const std::string allowed_list =
       command_line.GetSwitchValueASCII(command_line_switch);
+  if (allowed_list.empty())
+    return false;
+
+  const std::string host = url.host();
   if (allowed_list == "*") {
     // For now, we only allow packaged and platform apps in this wildcard.
+    if (!extension_set || !url.SchemeIs(extensions::kExtensionScheme))
+      return false;
+
+    const Extension* extension = extension_set->GetByID(host);
     return extension &&
         (extension->GetType() == Manifest::TYPE_LEGACY_PACKAGED_APP ||
          extension->GetType() == Manifest::TYPE_PLATFORM_APP);
   }
 
-  if (!allowed_list.empty()) {
-    base::StringTokenizer t(allowed_list, ",");
-    while (t.GetNext()) {
-      if (t.token() == host)
-        return true;
-    }
+  base::StringTokenizer t(allowed_list, ",");
+  while (t.GetNext()) {
+    if (t.token() == host)
+      return true;
   }
 
   return false;
 }
 
 }  // namespace chrome