Consider the origin when computing extension permissions

chrome/renderer/extensions/app_bindings.cc

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/renderer/extensions/app_bindings.h"
 
 #include "base/command_line.h"
 #include "base/string16.h"
 #include "base/string_util.h"
 #include "base/utf_string_conversions.h"
@@ skipping 169 matching lines @@
   if (!target_frame) {
     return v8::ThrowException(
         v8::String::New("Could not find frame for specified object."));
   }
 
   return GetDetailsForFrameImpl(target_frame);
 }
 
 v8::Handle<v8::Value> AppBindingsHandler::GetDetailsForFrameImpl(
     WebFrame* frame) {
-  const ::Extension* extension =
-      dispatcher_->extensions()->GetByURL(frame->document().url());
+  const ::Extension* extension = dispatcher_->extensions()->GetByURL(
+      ExtensionURLInfo(frame->document().securityOrigin(),
+                       frame->document().url()));
   if (!extension)
     return v8::Null();
 
   scoped_ptr<DictionaryValue> manifest_copy(
       extension->manifest_value()->DeepCopy());
   manifest_copy->SetString("id", extension->id());
   scoped_ptr<V8ValueConverter> converter(V8ValueConverter::create());
   return converter->ToV8Value(manifest_copy.get(),
                               frame->mainWorldScriptContext());
 }
@@ skipping 50 matching lines @@
     const std::string& channel_id, const std::string& error, int callback_id) {
   v8::HandleScope handle_scope;
   v8::Context::Scope context_scope(context_->v8_context());
   v8::Handle<v8::Value> argv[3];
   argv[0] = v8::String::New(channel_id.c_str());
   argv[1] = v8::String::New(error.c_str());
   argv[2] = v8::Integer::New(callback_id);
   CHECK(context_->CallChromeHiddenMethod("app.onGetAppNotifyChannelResponse",
                                          arraysize(argv), argv, NULL));
 }