[Extensions] Use document url (not top url) for tab-specific permissions

extensions/renderer/script_injection.cc

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "extensions/renderer/script_injection.h"
 
 #include <map>
 
 #include "base/lazy_instance.h"
 #include "base/metrics/histogram.h"
@@ skipping 118 matching lines @@
     // We're waiting for permission right now, try again later.
     return INJECTION_WAITING;
   }
 
   if (!injection_host_) {
     NotifyWillNotInject(ScriptInjector::EXTENSION_REMOVED);
     return INJECTION_FINISHED;  // We're done.
   }
 
   switch (injector_->CanExecuteOnFrame(
-      injection_host_.get(), web_frame_, tab_id_,
-      web_frame_->top()->document().url())) {
+      injection_host_.get(), web_frame_, tab_id_)) {
     case PermissionsData::ACCESS_DENIED:
       NotifyWillNotInject(ScriptInjector::NOT_ALLOWED);
       return INJECTION_FINISHED;  // We're done.
     case PermissionsData::ACCESS_WITHHELD:
       // Note: we don't consider ACCESS_WITHHELD for child frames because there
       // is nowhere to surface a request for a child frame.
       // TODO(devlin): We should ask for permission somehow. crbug.com/491402.
       if (web_frame_->parent()) {
         NotifyWillNotInject(ScriptInjector::NOT_ALLOWED);
         return INJECTION_FINISHED;
@@ skipping 148 matching lines @@
 }
 
 void ScriptInjection::InjectCss(blink::WebLocalFrame* frame) {
   std::vector<std::string> css_sources =
       injector_->GetCssSources(run_location_);
   for (const std::string& css : css_sources)
     frame->document().insertStyleSheet(blink::WebString::fromUTF8(css));
 }
 
 }  // namespace extensions