Use WebFrame::setIsolatedWorldSecurityOrigin to allow cross-origin XHRs in content scripts.

chrome/renderer/extensions/user_script_idle_scheduler.cc

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/renderer/extensions/user_script_idle_scheduler.h"
 
 #include "base/message_loop.h"
 #include "chrome/common/extensions/extension_error_utils.h"
 #include "chrome/common/extensions/extension_messages.h"
 #include "chrome/renderer/extensions/extension_dispatcher.h"
@@ skipping 127 matching lines @@
       }
 
       WebScriptSource source(WebString::fromUTF8(params.code));
       if (params.in_main_world) {
         frame->executeScript(source);
       } else {
         std::vector<WebScriptSource> sources;
         sources.push_back(source);
         UserScriptSlave::InsertInitExtensionCode(&sources, params.extension_id);
         frame->executeScriptInIsolatedWorld(
-            UserScriptSlave::GetIsolatedWorldId(params.extension_id),
+            UserScriptSlave::GetIsolatedWorldId(extension, frame),
             &sources.front(), sources.size(), EXTENSION_GROUP_CONTENT_SCRIPTS);
       }
     } else {
       frame->insertStyleText(WebString::fromUTF8(params.code), WebString());
     }
   }
 
   render_view->Send(new ExtensionHostMsg_ExecuteCodeFinished(
       render_view->routing_id(), params.request_id, true, ""));
 }
 
 bool UserScriptIdleScheduler::GetAllChildFrames(
     WebFrame* parent_frame,
     std::vector<WebFrame*>* frames_vector) const {
   if (!parent_frame)
     return false;
 
   for (WebFrame* child_frame = parent_frame->firstChild(); child_frame;
        child_frame = child_frame->nextSibling()) {
     frames_vector->push_back(child_frame);
     GetAllChildFrames(child_frame, frames_vector);
   }
   return true;
 }