Enhance --enable-strict-site-isolation to prevent a site-isolated renderer

content/browser/site_instance.h

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CONTENT_BROWSER_RENDERER_HOST_SITE_INSTANCE_H_
 #define CONTENT_BROWSER_RENDERER_HOST_SITE_INSTANCE_H_
 #pragma once
 
 #include "content/browser/renderer_host/render_process_host_impl.h"
 #include "content/common/content_export.h"
@@ skipping 154 matching lines @@
   // Get the effective URL for the given actual URL.
   static GURL GetEffectiveURL(content::BrowserContext* browser_context,
                               const GURL& url);
 
  private:
   // content::NotificationObserver implementation.
   virtual void Observe(int type,
                        const content::NotificationSource& source,
                        const content::NotificationDetails& details) OVERRIDE;
 
+  // Used to restrict a process' origin access rights.
+  void LockToOrigin();
+
   // The next available SiteInstance ID.
   static int32 next_site_instance_id_;
 
   // A unique ID for this SiteInstance.
   int32 id_;
 
   content::NotificationRegistrar registrar_;
 
   // BrowsingInstance to which this SiteInstance belongs.
   scoped_refptr<BrowsingInstance> browsing_instance_;
@@ skipping 16 matching lines @@
   // The web site that this SiteInstance is rendering pages for.
   GURL site_;
 
   // Whether SetSite has been called.
   bool has_site_;
 
   DISALLOW_COPY_AND_ASSIGN(SiteInstance);
 };
 
 #endif  // CONTENT_BROWSER_RENDERER_HOST_SITE_INSTANCE_H_