// Copyright 2022 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.

#include "chrome/browser/ui/webui/top_chrome/untrusted_top_chrome_web_ui_controller.h"

#include "content/public/browser/web_ui.h"
#include "content/public/common/bindings_policy.h"

UntrustedTopChromeWebUIController::UntrustedTopChromeWebUIController(
    content::WebUI* web_ui,
    bool enable_chrome_send,
    bool enable_chrome_histograms)
    : TopChromeWebUIController(web_ui,
                               enable_chrome_send,
                               enable_chrome_histograms) {
  // chrome.send() will not work without bindings.
  CHECK(!enable_chrome_send);
  // UntrustedWebUIController should never enable WebUI bindings that expose
  // all of the browser interfaces.
  web_ui->SetBindings(content::BindingsPolicySet());
}

UntrustedTopChromeWebUIController::~UntrustedTopChromeWebUIController() =
    default;

content::WebUIController::TrustPolicy
UntrustedTopChromeWebUIController::GetTrustPolicy() {
  return content::WebUIController::kUntrusted;
}