Limiting the "Cookies and site data" form to "web safe" schemes.

chrome/browser/browsing_data_quota_helper_impl.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/browsing_data_quota_helper_impl.h"
 
 #include <map>
 #include <set>
 
 #include "base/bind.h"
 #include "base/logging.h"
 #include "chrome/browser/profiles/profile.h"
 #include "chrome/common/url_constants.h"
+#include "content/public/browser/child_process_security_policy.h"
 #include "webkit/quota/quota_manager.h"
 
 using content::BrowserThread;
 
 // static
 BrowsingDataQuotaHelper* BrowsingDataQuotaHelper::Create(Profile* profile) {
   return new BrowsingDataQuotaHelperImpl(
       BrowserThread::GetMessageLoopProxyForThread(BrowserThread::UI),
       BrowserThread::GetMessageLoopProxyForThread(BrowserThread::IO),
       content::BrowserContext::GetQuotaManager(profile));
@@ skipping 54 matching lines @@
 
   quota_manager_->GetOriginsModifiedSince(
       quota::kStorageTypeTemporary,
       base::Time(),
       base::Bind(&BrowsingDataQuotaHelperImpl::GotOrigins,
                  weak_factory_.GetWeakPtr()));
 }
 
 void BrowsingDataQuotaHelperImpl::GotOrigins(
     const std::set<GURL>& origins, quota::StorageType type) {
+  content::ChildProcessSecurityPolicy* policy =
+      content::ChildProcessSecurityPolicy::GetInstance();
   for (std::set<GURL>::const_iterator itr = origins.begin();
        itr != origins.end();
        ++itr)
-    if (!itr->SchemeIs(chrome::kExtensionScheme))
+    if (policy->IsWebSafeScheme(itr->scheme()))
       pending_hosts_.insert(std::make_pair(itr->host(), type));
 
   DCHECK(type == quota::kStorageTypeTemporary ||
          type == quota::kStorageTypePersistent);
 
   if (type == quota::kStorageTypeTemporary) {
     quota_manager_->GetOriginsModifiedSince(
         quota::kStorageTypePersistent,
         base::Time(),
         base::Bind(&BrowsingDataQuotaHelperImpl::GotOrigins,
@@ skipping 74 matching lines @@
   callback_.Run(result);
   callback_.Reset();
 }
 
 void BrowsingDataQuotaHelperImpl::DidRevokeHostQuota(
     quota::QuotaStatusCode status_unused,
     const std::string& host_unused,
     quota::StorageType type_unused,
     int64 quota_unused) {
 }