| // Copyright 2026 The Chromium Authors |
| // Use of this source code is governed by a BSD-style license that can be |
| // found in the LICENSE file. |
| |
| #ifndef COMPONENTS_EXO_DATA_EXCHANGE_UTILS_H_ |
| #define COMPONENTS_EXO_DATA_EXCHANGE_UTILS_H_ |
| |
| #include <optional> |
| #include <vector> |
| |
| #include "base/pickle.h" |
| |
| namespace exo { |
| |
| // Reads custom data from |data|, filters out keys starting with "fs/", and if |
| // the resulting map is not empty, serializes it back to a Pickle. Returns |
| // nullopt if the input data cannot be read as custom data, or if all keys were |
| // filtered out. |
| // |data| comes from a guest VM. Re-serialize and drop FilesApp-internal `fs/*` |
| // keys so a guest cannot forge fs/tag + fs/sources and drive FilesApp / |
| // HoldingSpace into operating on host paths it was never shared. |
| std::optional<base::Pickle> FilterCustomData(const std::vector<uint8_t>& data); |
| |
| } // namespace exo |
| |
| #endif // COMPONENTS_EXO_DATA_EXCHANGE_UTILS_H_ |
