Add some browser-level checks to prohibit access to extension bindings by...

chrome/browser/tab_contents/tab_contents.cc

 // Copyright (c) 2009 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/tab_contents/tab_contents.h"
 
 #include "app/l10n_util.h"
 #include "app/resource_bundle.h"
 #include "base/file_version_info.h"
 #include "base/process_util.h"
@@ skipping 2374 matching lines @@
 
 bool TabContents::CreateRenderViewForRenderManager(
     RenderViewHost* render_view_host) {
   // When we're running a DOM UI, the RenderViewHost needs to be put in DOM UI
   // mode before CreateRenderView is called. When we're asked to create a
   // RenderView, that means it's for the pending entry, so we have to use the
   // pending DOM UI.
   if (render_manager_.pending_dom_ui())
     render_view_host->AllowDOMUIBindings();
 
+  // Ditto for extension bindings.
+  if (controller().pending_entry()->url().SchemeIs(chrome::kExtensionScheme))
+    render_view_host->AllowExtensionBindings();
+
   RenderWidgetHostView* rwh_view = view_->CreateViewForWidget(render_view_host);
   if (!render_view_host->CreateRenderView())
     return false;
 
   // Now that the RenderView has been created, we need to tell it its size.
   rwh_view->SetSize(view_->GetContainerSize());
 
   UpdateMaxPageIDIfNecessary(render_view_host->site_instance(),
                              render_view_host);
   return true;
@@ skipping 39 matching lines @@
       NavigationController::LoadCommittedDetails& committed_details =
           *(Details<NavigationController::LoadCommittedDetails>(details).ptr());
       ExpireInfoBars(committed_details);
       break;
     }
 
     default:
       NOTREACHED();
   }
 }