Prevent cross-site pages when --site-per-process is passed

content/browser/child_process_security_policy_impl.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CONTENT_BROWSER_CHILD_PROCESS_SECURITY_POLICY_IMPL_H_
 #define CONTENT_BROWSER_CHILD_PROCESS_SECURITY_POLICY_IMPL_H_
 
 
 #include <map>
 #include <set>
 #include <string>
 
 #include "base/compiler_specific.h"
 #include "base/gtest_prod_util.h"
 #include "base/memory/singleton.h"
 #include "base/synchronization/lock.h"
 #include "content/public/browser/child_process_security_policy.h"
+#include "webkit/glue/resource_type.h"
 
 class FilePath;
 class GURL;
 
 namespace content {
 
 class CONTENT_EXPORT ChildProcessSecurityPolicyImpl
     : NON_EXPORTED_BASE(public ChildProcessSecurityPolicy) {
  public:
   // Object can only be created through GetInstance() so the constructor is
@@ skipping 75 matching lines @@
   void GrantReadRawCookies(int child_id);
 
   // Revoke read raw cookies permission.
   void RevokeReadRawCookies(int child_id);
 
   // Before servicing a child process's request for a URL, the browser should
   // call this method to determine whether the process has the capability to
   // request the URL.
   bool CanRequestURL(int child_id, const GURL& url);
 
+  // Returns true if the process is permitted to load the page for

[Charlie Reis, 2012/11/29 22:00:54]

nit: s/the page for/pages from/

[irobert, 2012/12/01 00:02:48]

Done.

+  // the given origin (applied to the page in main_frame and sub_frame).

[Charlie Reis, 2012/11/29 22:00:54]

nit: the given origin in main frames or subframes.

[irobert, 2012/12/01 00:02:48]

Done.

+  // Only might return false if --site-per-process flag is used.
+  bool CanLoadPage(int child_id, const GURL& url,
+                   ResourceType::Type resource_type);
+
   // Before servicing a child process's request to enumerate a directory
   // the browser should call this method to check for the capability.
   bool CanReadDirectory(int child_id, const FilePath& directory);
 
   // Determines if certain permissions were granted for a file. |permissions|
   // must be a bit-set of base::PlatformFileFlags.
   bool HasPermissionsForFile(int child_id,
                              const FilePath& file,
                              int permissions);
 
@@ skipping 90 matching lines @@
   // This maps keeps the record of which js worker thread child process
   // corresponds to which main js thread child process.
   WorkerToMainProcessMap worker_map_;
 
   DISALLOW_COPY_AND_ASSIGN(ChildProcessSecurityPolicyImpl);
 };
 
 }  // namespace content
 
 #endif  // CONTENT_BROWSER_CHILD_PROCESS_SECURITY_POLICY_IMPL_H_