Code: bool WebviewInfo::IsResourceWebviewAccessible(
    const Extension* extension,
    const std::string& partition_id,
    const std::string& relative_path) {
  if (!extension)
    return false;

  const WebviewInfo* info = GetResourcesInfo(*extension);
   if (!info)
     return false;
 
  bool partition_is_privileged = false;
  for (size_t i = 0;
       i < info->webview_privileged_partitions_.size();
       ++i) {
    if (MatchPattern(partition_id, info->webview_privileged_partitions_[i])) {
      partition_is_privileged = true;
      break;
     }
   }
 
  return partition_is_privileged && extension->ResourceMatches(
      info->webview_accessible_resources_, relative_path);
 }

Vulnerability Type: DoS 
CWE ID: CWE-399
Summary: Use-after-free vulnerability in Google Chrome before 28.0.1500.95 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to not properly considering focus during the processing of JavaScript events in the presence of a multiple-fields input type.
Commit Message: <webview>: Update format for local file access in manifest.json

The new format is:


"webview" : {
   "partitions" : [
      {
           "name" : "foo*",
           "accessible_resources" : ["a.html", "b.html"]
      },
      {
           "name" : "bar",
           "accessible_resources" : ["a.html", "c.html"]
      }
   ]
}

BUG=340291

Review URL: https://codereview.chromium.org/151923005

git-svn-id: svn://svn.chromium.org/chrome/trunk/src@249640 0039d316-1c4b-4281-b951-d872f2087c98