Prevent cross-site pages when --site-per-process is passed

content/browser/child_process_security_policy_impl.h

Index: content/browser/child_process_security_policy_impl.h
diff --git a/content/browser/child_process_security_policy_impl.h b/content/browser/child_process_security_policy_impl.h
index 8a3d410e5294d75a2452fffc32ca2200e91f26df..339dd41834e9271122559c545142b167ae875c89 100644
--- a/content/browser/child_process_security_policy_impl.h
+++ b/content/browser/child_process_security_policy_impl.h
@@ -15,6 +15,7 @@
 #include "base/memory/singleton.h"
 #include "base/synchronization/lock.h"
 #include "content/public/browser/child_process_security_policy.h"
+#include "webkit/glue/resource_type.h"
 
 class FilePath;
 class GURL;
@@ -110,6 +111,12 @@ class CONTENT_EXPORT ChildProcessSecurityPolicyImpl
   // request the URL.
   bool CanRequestURL(int child_id, const GURL& url);
 
+  // Returns true if the process is permitted to load the page for

[Charlie Reis, 2012/11/29 22:00:54]

nit: s/the page for/pages from/

[irobert, 2012/12/01 00:02:48]

Done.

+  // the given origin (applied to the page in main_frame and sub_frame).

[Charlie Reis, 2012/11/29 22:00:54]

nit: the given origin in main frames or subframes.

[irobert, 2012/12/01 00:02:48]

Done.

+  // Only might return false if --site-per-process flag is used.
+  bool CanLoadPage(int child_id, const GURL& url,
+                   ResourceType::Type resource_type);
+
   // Before servicing a child process's request to enumerate a directory
   // the browser should call this method to check for the capability.
   bool CanReadDirectory(int child_id, const FilePath& directory);