Don't allow updating tabs to javascript URLs without host

chrome/common/extensions/extension.h

 // Copyright (c) 2009 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CHROME_COMMON_EXTENSIONS_EXTENSION_H_
 #define CHROME_COMMON_EXTENSIONS_EXTENSION_H_
 
 #include <map>
 #include <set>
 #include <string>
@@ skipping 181 matching lines @@
   const std::string& public_key() const { return public_key_; }
   const std::string& description() const { return description_; }
   const UserScriptList& content_scripts() const { return content_scripts_; }
   const PageActionMap& page_actions() const { return page_actions_; }
   const std::vector<PrivacyBlacklistInfo>& privacy_blacklists() const {
     return privacy_blacklists_;
   }
   const std::vector<PluginInfo>& plugins() const { return plugins_; }
   const GURL& background_url() const { return background_url_; }
   const std::vector<ToolstripInfo>& toolstrips() const { return toolstrips_; }
+  const std::vector<std::string>& api_permissions() const {
+    return api_permissions_;
+  }
   const HostPermissions& host_permissions() const {
     return host_permissions_;
   }
-  const std::vector<std::string>& api_permissions() const {
-    return api_permissions_;
-  }
+
+  // Returns true if the extension has permission to access the host for the
+  // specified URL.
+  bool CanAccessHost(const GURL& url) const;
 
   // Returns the set of hosts that the extension effectively has access to. This
   // is used in the permissions UI and is a combination of the hosts accessible
   // through content scripts and the hosts accessible through XHR.
   const std::set<std::string> GetEffectiveHostPermissions() const;
 
   // Whether the extension has access to all hosts. This is true if there is
   // a content script that matches all hosts, or if there is a host permission
   // for all hosts.
   bool HasAccessToAllHosts() const;
@@ skipping 177 matching lines @@
 
   // True if the background page is ready.
   bool background_page_ready_;
 
   FRIEND_TEST(ExtensionTest, LoadPageActionHelper);
 
   DISALLOW_COPY_AND_ASSIGN(Extension);
 };
 
 #endif  // CHROME_COMMON_EXTENSIONS_EXTENSION_H_