Don't allow updating tabs to javascript URLs without host

chrome/browser/extensions/extension_function_dispatcher.h

 // Copyright (c) 2009 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CHROME_BROWSER_EXTENSIONS_EXTENSION_FUNCTION_DISPATCHER_H_
 #define CHROME_BROWSER_EXTENSIONS_EXTENSION_FUNCTION_DISPATCHER_H_
 
 #include <string>
 #include <set>
 #include <vector>
 
 #include "base/ref_counted.h"
 #include "googleurl/src/gurl.h"
 
 class Browser;
+class Extension;
 class ExtensionFunction;
 class ExtensionHost;
 class Profile;
 class RenderViewHost;
 class RenderViewHostDelegate;
 
 // A factory function for creating new ExtensionFunction instances.
 typedef ExtensionFunction* (*ExtensionFunctionFactory)();
 
 // ExtensionFunctionDispatcher receives requests to execute functions from
@@ skipping 41 matching lines @@
   void SendResponse(ExtensionFunction* api, bool success);
 
   // Gets the browser extension functions should operate relative to. For
   // example, for positioning windows, or alert boxes, or creating tabs.
   Browser* GetBrowser();
 
   // Gets the ExtensionHost associated with this object.  In the case of
   // tab hosted extension pages, this will return NULL.
   ExtensionHost* GetExtensionHost();
 
+  // Gets the extension the function is being invoked by. This should not ever
+  // return NULL.
+  Extension* GetExtension();
+
   // Handle a malformed message.  Possibly the result of an attack, so kill
   // the renderer.
   void HandleBadMessage(ExtensionFunction* api);
 
   // Gets the URL for the view we're displaying.
   const GURL& url() { return url_; }
 
   // Gets the ID for this extension.
   const std::string extension_id() { return url_.host(); }
 
@@ skipping 14 matching lines @@
 
   // AutomationExtensionFunction requires access to the RenderViewHost
   // associated with us.  We make it a friend rather than exposing the
   // RenderViewHost as a public method as we wouldn't want everyone to
   // start assuming a 1:1 relationship between us and RenderViewHost,
   // whereas AutomationExtensionFunction is by necessity "tight" with us.
   friend class AutomationExtensionFunction;
 };
 
 #endif  // CHROME_BROWSER_EXTENSIONS_EXTENSION_FUNCTION_DISPATCHER_H_