Implement a prototype to render cross-site iframes in a separate process from their parent.

content/browser/child_process_security_policy_impl.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "content/browser/child_process_security_policy_impl.h"
 
 #include "base/command_line.h"
 #include "base/file_path.h"
 #include "base/logging.h"
 #include "base/metrics/histogram.h"
@@ skipping 490 matching lines @@
 }
 
 bool ChildProcessSecurityPolicyImpl::CanLoadPage(
     int child_id,
     const GURL& url,
     ResourceType::Type resource_type) {
   // If --site-per-process flag is passed, we should enforce
   // stronger security restrictions on page navigation.
   if (CommandLine::ForCurrentProcess()->HasSwitch(switches::kSitePerProcess) &&
       ResourceType::IsFrame(resource_type)) {
-    // TODO(irobert): This currently breaks some WebUI page such as
-    // "chrome://extensions/" (belongs to site chrome://chrome/) which
-    // will load an iframe for the page "chrome://uber-frame/"
-    // (belongs to site chrome://uber-frame/).
-    base::AutoLock lock(lock_);
-    SecurityStateMap::iterator state = security_state_.find(child_id);
-    if (state == security_state_.end())
-      return false;
-    return state->second->CanLoadPage(url);
+    // TODO(nasko): Do the proper check for site-per-process, once
+    // out-of-process iframes is ready to go.

[Charlie Reis, 2013/01/17 19:44:54]

Wasn't this from your other CL?  Did you want to land that first?

[nasko, 2013/01/17 22:19:13]

As discussed, I've decided to drop the other CL and merge the code here.

[Charlie Reis, 2013/01/18 05:37:07]

Ok.  In that case, can you add the bug number from that other CL to this one?

+    return true;
   }
   return true;
 }
 
 bool ChildProcessSecurityPolicyImpl::CanRequestURL(
     int child_id, const GURL& url) {
   if (!url.is_valid())
     return false;  // Can't request invalid URLs.
 
   if (IsDisabledScheme(url.scheme()))
@@ skipping 170 matching lines @@
     int permission) {
   base::AutoLock lock(lock_);
 
   SecurityStateMap::iterator state = security_state_.find(child_id);
   if (state == security_state_.end())
     return false;
   return state->second->HasPermissionsForFileSystem(filesystem_id, permission);
 }
 
 }  // namespace content