Add window access checks for Suborigins

Source/platform/weborigin/SecurityOrigin.cpp

 /*
  * Copyright (C) 2007 Apple Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions
  * are met:
  *
  * 1.  Redistributions of source code must retain the above copyright
  *     notice, this list of conditions and the following disclaimer.
  * 2.  Redistributions in binary form must reproduce the above copyright
@@ skipping 268 matching lines @@
                 canAccess = true;
         }
     }
 
     if (canAccess && isLocal())
         canAccess = passesFileCheck(other);
 
     return canAccess;
 }
 
+bool SecurityOrigin::canAccessCheckSuborigins(const SecurityOrigin* other) const
+{
+    if (hasSuborigin() != other->hasSuborigin())
+        return false;
+
+    if (hasSuborigin() && suboriginName() != other->suboriginName())
+        return false;
+
+    return canAccess(other);
+}
+
 bool SecurityOrigin::passesFileCheck(const SecurityOrigin* other) const
 {
     ASSERT(isLocal() && other->isLocal());
 
     return !m_enforceFilePathSeparation && !other->m_enforceFilePathSeparation;
 }
 
 bool SecurityOrigin::canRequest(const KURL& url) const
 {
     if (m_universalAccess)
@@ skipping 14 matching lines @@
     // to ignore document.domain effects.
     if (isSameSchemeHostPort(targetOrigin.get()))
         return true;
 
     if (SecurityPolicy::isAccessWhiteListed(this, targetOrigin.get()))
         return true;
 
     return false;
 }
 
+bool SecurityOrigin::canRequestNoSuborigin(const KURL& url) const
+{
+    return !hasSuborigin() && canRequest(url);
+}
+
 bool SecurityOrigin::taintsCanvas(const KURL& url) const
 {
     if (canRequest(url))
         return false;
 
     // This function exists because we treat data URLs as having a unique origin,
     // contrary to the current (9/19/2009) draft of the HTML5 specification.
     // We still want to let folks paint data URLs onto untainted canvases, so
     // we special case data URLs below. If we change to match HTML5 w.r.t.
     // data URL security, then we can remove this function in favor of
@@ skipping 220 matching lines @@
 
     if (m_port != other->m_port)
         return false;
 
     if (isLocal() && !passesFileCheck(other))
         return false;
 
     return true;
 }
 
+bool SecurityOrigin::isSameSchemeHostPortAndSuborigin(const SecurityOrigin* other) const
+{
+    return isSameSchemeHostPort(other) && (!hasSuborigin() || suboriginName() == other->suboriginName());
+}
+
 const KURL& SecurityOrigin::urlWithUniqueSecurityOrigin()
 {
     ASSERT(isMainThread());
     DEFINE_STATIC_LOCAL(const KURL, uniqueSecurityOriginURL, (ParsedURLString, "data:,"));
     return uniqueSecurityOriginURL;
 }
 
 void SecurityOrigin::transferPrivilegesFrom(const SecurityOrigin& origin)
 {
     m_universalAccess = origin.m_universalAccess;
     m_canLoadLocalResources = origin.m_canLoadLocalResources;
     m_enforceFilePathSeparation = origin.m_enforceFilePathSeparation;
 }
 
 } // namespace blink