Temporarily avoid process swaps for renderer navigations away from an app.

chrome/renderer/render_view.cc

 // Copyright (c) 2010 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/renderer/render_view.h"
 
 #include <algorithm>
 #include <cmath>
 #include <string>
 #include <vector>
@@ skipping 360 matching lines @@
       return frame_url.SchemeIs(kDirProtocols[i]) &&
              frame_url.ExtractFileName().empty();
     }
   }
 
   return false;
 }
 
 // Returns true if the frame is navigating to an URL either into or out of an
 // extension app's extent.
-static bool CrossesExtensionExtents(WebFrame* frame, const GURL& new_url) {
-  if (!RenderThread::current())
-    return false;
-
+// TODO(creis): Temporary workaround for crbug.com/65953: Only return true if
+// we would enter an extension app's extent from a non-app.  We avoid swapping
+// processes to exit an app for now, since we do not yet restore context (such
+// as window.opener) if the window navigates back.
+static bool CrossesIntoExtensionExtent(WebFrame* frame, const GURL& new_url) {
   // If the URL is still empty, this is a window.open navigation. Check the
   // opener's URL.
   GURL old_url(frame->url());
   if (old_url.is_empty() && frame->opener())
     old_url = frame->opener()->url();
 
-  return !ExtensionRendererInfo::InSameExtent(old_url, new_url);
+  return !ExtensionRendererInfo::InSameExtent(old_url, new_url) &&
+         !ExtensionRendererInfo::GetByURL(old_url);
 }
 
 // Returns the ISO 639_1 language code of the specified |text|, or 'unknown'
 // if it failed.
 static std::string DetermineTextLanguage(const string16& text) {
   std::string language = chrome::kUnknownLanguageCode;
   int num_languages = 0;
   int text_bytes = 0;
   bool is_reliable = false;
   Language cld_language =
@@ skipping 2592 matching lines @@
         // We don't send referrer from extensions.
         OpenURL(url, GURL(), default_policy);
         return WebKit::WebNavigationPolicyIgnore;  // Suppress the load here.
     }
 
     // If the navigation would cross an app extent boundary, we also need
     // to defer to the browser to ensure process isolation.
     // TODO(erikkay) This is happening inside of a check to is_content_initiated
     // which means that things like the back button won't trigger it.  Is that
     // OK?
-    if (CrossesExtensionExtents(frame, url)) {
+    // TODO(creis): For now, we only swap processes to enter an app and not
+    // exit it, since we currently lose context (e.g., window.opener) if the
+    // window navigates back.  See crbug.com/65953.
+    if (CrossesIntoExtensionExtent(frame, url)) {
       // Include the referrer in this case since we're going from a hosted web
       // page. (the packaged case is handled previously by the extension
       // navigation test)
       GURL referrer(request.httpHeaderField(WebString::fromUTF8("Referer")));
       OpenURL(url, referrer, default_policy);
       return WebKit::WebNavigationPolicyIgnore;  // Suppress the load here.
     }
   }
 
   // Detect when a page is "forking" a new tab that can be safely rendered in
@@ skipping 2713 matching lines @@
   external_popup_menu_.reset();
 }
 #endif
 
 void RenderView::AddErrorToRootConsole(const string16& message) {
   if (webview() && webview()->mainFrame()) {
     webview()->mainFrame()->addMessageToConsole(
         WebConsoleMessage(WebConsoleMessage::LevelError, message));
   }
 }