[Extensions] Don't inject scripts into remote frames, null documents.

extensions/renderer/programmatic_script_injector.cc

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "extensions/renderer/programmatic_script_injector.h"
 
 #include <vector>
 
 #include "base/values.h"
 #include "content/public/renderer/render_view.h"
@@ skipping 52 matching lines @@
 bool ProgrammaticScriptInjector::ShouldInjectCss(
     UserScript::RunLocation run_location) const {
   return GetRunLocation() == run_location && !params_->is_javascript;
 }
 
 PermissionsData::AccessType ProgrammaticScriptInjector::CanExecuteOnFrame(
     const InjectionHost* injection_host,
     blink::WebFrame* frame,
     int tab_id,
     const GURL& top_url) const {
+  // It doesn't make sense to inject a script into a remote frame or a frame
+  // with a null document.
+  if (frame->isWebRemoteFrame() || frame->document().isNull())
+    return PermissionsData::ACCESS_DENIED;
   GURL effective_document_url = ScriptContext::GetEffectiveDocumentURL(
       frame, frame->document().url(), params_->match_about_blank);
   if (params_->is_web_view) {
     if (frame->parent()) {
       // This is a subframe inside <webview>, so allow it.
       return PermissionsData::ACCESS_ALLOWED;
     }
 
     return effective_document_url == params_->webview_src
                ? PermissionsData::ACCESS_ALLOWED
@@ skipping 60 matching lines @@
 
   render_view_->Send(new ExtensionHostMsg_ExecuteCodeFinished(
       render_view_->GetRoutingID(),
       params_->request_id,
       error,
       url_,
       *results_));
 }
 
 }  // namespace extensions