Proof of concept of ignoring x-frame-options for sign-in webui.

chrome/browser/chrome_content_browser_client.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/chrome_content_browser_client.h"
 
 #include <set>
 #include <utility>
 #include <vector>
 
@@ skipping 718 matching lines @@
   return main_parts;
 }
 
 std::string ChromeContentBrowserClient::GetStoragePartitionIdForSite(
     content::BrowserContext* browser_context,
     const GURL& site) {
   std::string partition_id;
 
   // The partition ID for webview guest processes is the string value of its
   // SiteInstance URL - "chrome-guest://app_id/persist?partition".
-  if (site.SchemeIs(content::kGuestScheme))
+  if (site.SchemeIs(content::kGuestScheme)) {
     partition_id = site.spec();
+  }  else if (site.SchemeIs(chrome::kChromeUIScheme) &&
+             site.host() == chrome::kChromeSigninHost) {
+    partition_id = site.spec();
+  }
 
   DCHECK(IsValidStoragePartitionId(browser_context, partition_id));
   return partition_id;
 }
 
 bool ChromeContentBrowserClient::IsValidStoragePartitionId(
     content::BrowserContext* browser_context,
     const std::string& partition_id) {
   // The default ID is empty and is always valid.
   if (partition_id.empty())
@@ skipping 43 matching lines @@
 
     if (is_isolated) {
       CHECK(site.has_host());
       // For extensions with isolated storage, the the host of the |site| is
       // the |partition_domain|. The |in_memory| and |partition_name| are only
       // used in guest schemes so they are cleared here.
       *partition_domain = site.host();
       *in_memory = false;
       partition_name->clear();
     }
+  } else if (site.SchemeIs(chrome::kChromeUIScheme) &&
+             site.host() == chrome::kChromeSigninHost) {
+    *partition_domain = chrome::kChromeSigninHost;
   }
 
   // Assert that if |can_be_default| is false, the code above must have found a
   // non-default partition.  If this fails, the caller has a serious logic
   // error about which StoragePartition they expect to be in and it is not
   // safe to continue.
   CHECK(can_be_default || !partition_domain->empty());
 }
 
 content::WebContentsViewDelegate*
@@ skipping 1886 matching lines @@
   // releases of Chrome. Permitting "Unknown" allows these APIs to be used on
   // Chromium builds as well.
   return channel <= chrome::VersionInfo::CHANNEL_DEV;
 #else
   return false;
 #endif
 }
 
 
 }  // namespace chrome