Block scripting in plugin teardown during Document unload.

content/renderer/pepper/ppb_var_deprecated_impl.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "content/renderer/pepper/ppb_var_deprecated_impl.h"
 
 #include <limits>
 
 #include "content/renderer/pepper/host_globals.h"
 #include "content/renderer/pepper/message_channel.h"
 #include "content/renderer/pepper/pepper_plugin_instance_impl.h"
 #include "content/renderer/pepper/pepper_try_catch.h"
 #include "content/renderer/pepper/plugin_module.h"
 #include "content/renderer/pepper/plugin_object.h"
 #include "content/renderer/pepper/v8object_var.h"
 #include "ppapi/c/dev/ppb_var_deprecated.h"
 #include "ppapi/c/ppb_var.h"
 #include "ppapi/shared_impl/ppb_var_shared.h"
 #include "third_party/WebKit/public/web/WebDocument.h"
 #include "third_party/WebKit/public/web/WebElement.h"
 #include "third_party/WebKit/public/web/WebLocalFrame.h"
 #include "third_party/WebKit/public/web/WebPluginContainer.h"
+#include "third_party/WebKit/public/web/WebPluginScriptForbiddenScope.h"
 #include "third_party/WebKit/public/web/WebScopedUserGesture.h"
 
 using ppapi::V8ObjectVar;
 using ppapi::PpapiGlobals;
 using ppapi::ScopedPPVar;
 using ppapi::ScopedPPVarArray;
 using ppapi::StringVar;
 using ppapi::Var;
 
 namespace content {
@@ skipping 16 matching lines @@
   }
 
   // Check if the object is valid. If it isn't, set an exception and return
   // false.
   bool IsValid(PP_Var* exception) {
     // If we already have an exception, then the call is invalid according to
     // the unittests.
     if (exception && exception->type != PP_VARTYPE_UNDEFINED)
       return false;
     if (instance_)
-      return true;
+      return !instance_->is_deleted() ||
+             !blink::WebPluginScriptForbiddenScope::isForbidden();
     if (exception)
       *exception = ppapi::StringVar::StringToPPVar(kInvalidObjectException);
     return false;
   }
   // Lazily grab the object so that the handle is created in the current handle
   // scope.
   v8::Local<v8::Object> GetObject() { return object_var_->GetHandle(); }
   PepperPluginInstanceImpl* instance() { return instance_; }
   V8VarConverter* converter() { return converter_.get(); }
 
@@ skipping 289 matching lines @@
       &CallDeprecated,
       &Construct,
       &IsInstanceOfDeprecated,
       &CreateObjectDeprecated,
       &CreateObjectWithModuleDeprecated, };
 
   return &var_deprecated_interface;
 }
 
 }  // namespace content