[Extensions] Use document url (not top url) for tab-specific permissions

extensions/renderer/injection_host.h

Index: extensions/renderer/injection_host.h
diff --git a/extensions/renderer/injection_host.h b/extensions/renderer/injection_host.h
index 4dcb225f2aedd8a644c1203a61f22e91c1fad91c..b0a01feefc9237726f9fb0f2e369f8b6d3202100 100644
--- a/extensions/renderer/injection_host.h
+++ b/extensions/renderer/injection_host.h
@@ -9,6 +9,10 @@
 #include "extensions/common/permissions/permissions_data.h"
 #include "url/gurl.h"
 
+namespace content {
+class RenderFrame;
+}
+
 // An interface for all kinds of hosts who own user scripts.
 class InjectionHost {
  public:
@@ -26,7 +30,7 @@ class InjectionHost {
   // Returns true if the script should execute.
   virtual extensions::PermissionsData::AccessType CanExecuteOnFrame(
       const GURL& document_url,
-      const GURL& top_frame_url,
+      content::RenderFrame* render_frame,
       int tab_id,
       bool is_declarative) const = 0;