Don't allow the task manager to share a process with anything else.

chrome/browser/chrome_content_browser_client.cc

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/chrome_content_browser_client.h"
 
 #include <set>
 #include <vector>
 
 #include "base/bind.h"
@@ skipping 380 matching lines @@
 }
 
 bool ChromeContentBrowserClient::IsSuitableHost(
     RenderProcessHost* process_host,
     const GURL& site_url) {
   Profile* profile =
       Profile::FromBrowserContext(process_host->browser_context());
   ExtensionService* service = profile->GetExtensionService();
   extensions::ProcessMap* process_map = service->process_map();
 
+  // Don't allow the Task Manager to share a process with anything else.
+  // Otherwise it can affect the renderers it is observing.
+  // Note: we could create another RenderProcessHostPrivilege bucket for
+  // this to allow multiple chrome://tasks instances to share, but that's
+  // a very unlikely case without serious consequences.
+  if (site_url.GetOrigin() == GURL(chrome::kChromeUITaskManagerURL).GetOrigin())
+    return false;
+
   // These may be NULL during tests. In that case, just assume any site can
   // share any host.
   if (!service || !process_map)
     return true;
 
   // Experimental:
   // If --enable-strict-site-isolation is enabled, do not allow non-WebUI pages
   // to share a renderer process.  (We could allow pages from the same site or
   // extensions of the same type to share, if we knew what the given process
   // was dedicated to.  Allowing no sharing is simpler for now.)  This may
@@ skipping 702 matching lines @@
 #if defined(USE_NSS)
 crypto::CryptoModuleBlockingPasswordDelegate*
     ChromeContentBrowserClient::GetCryptoPasswordDelegate(
         const GURL& url) {
   return browser::NewCryptoModuleBlockingDialogDelegate(
       browser::kCryptoModulePasswordKeygen, url.host());
 }
 #endif
 
 }  // namespace chrome