Block NPAPI plugins by default Add Facebook video calling and Google Earth plugins to the tracked l…

chrome/browser/plugins/plugin_metadata.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/plugins/plugin_metadata.h"
 
 #include <algorithm>
 
 #include "base/logging.h"
 #include "base/strings/string_util.h"
@@ skipping 79 matching lines @@
   return true;
 }
 
 PluginMetadata::SecurityStatus PluginMetadata::GetSecurityStatus(
     const content::WebPluginInfo& plugin) const {
   if (versions_.empty()) {
 #if defined(OS_LINUX)
     // On Linux, unknown plugins require authorization.
     return SECURITY_STATUS_REQUIRES_AUTHORIZATION;
 #else
+    if (plugin.type == content::WebPluginInfo::PLUGIN_TYPE_NPAPI) {

[Bernhard Bauer, 2013/09/24 18:16:56]

This check isn't necessary. Pepper plug-ins are already exempted from
infobarring
(https://code.google.com/p/chromium/codesearch#chromium/src/chrome/browser/plu...).

[Cris Neckar, 2013/09/24 18:52:00]

Done.

+      // Unknown NPAPI plugins require authorization.
+      return SECURITY_STATUS_REQUIRES_AUTHORIZATION;
+    }
     return SECURITY_STATUS_UP_TO_DATE;
 #endif
   }
 
   Version version;
   content::WebPluginInfo::CreateVersionFromString(plugin.version, &version);
   if (!version.IsValid())
     version = Version("0");
 
   // |lower_bound| returns the latest version that is not newer than |version|.
@@ skipping 17 matching lines @@
   PluginMetadata* copy = new PluginMetadata(identifier_,
                                             name_,
                                             url_for_display_,
                                             plugin_url_,
                                             help_url_,
                                             group_name_matcher_,
                                             language_);
   copy->versions_ = versions_;
   return make_scoped_ptr(copy);
 }