Use GetLastCommittedOrigin instead of GetLastCommittedURL in bluetooth chooser

chrome/browser/ui/android/bluetooth_chooser_android.cc

Index: chrome/browser/ui/android/bluetooth_chooser_android.cc
diff --git a/chrome/browser/ui/android/bluetooth_chooser_android.cc b/chrome/browser/ui/android/bluetooth_chooser_android.cc
index 04449ae806ae4efc4e11b56486a3f7ada265cfbf..cd0d08dcd65a98bb4573d535b49de62c2ade9ca1 100644
--- a/chrome/browser/ui/android/bluetooth_chooser_android.cc
+++ b/chrome/browser/ui/android/bluetooth_chooser_android.cc
@@ -12,6 +12,7 @@
 #include "content/public/browser/android/content_view_core.h"
 #include "jni/BluetoothChooserDialog_jni.h"
 #include "ui/android/window_android.h"
+#include "url/origin.h"
 
 using base::android::AttachCurrentThread;
 using base::android::ConvertUTF8ToJavaString;
@@ -21,7 +22,7 @@ using base::android::ScopedJavaLocalRef;
 BluetoothChooserAndroid::BluetoothChooserAndroid(
     content::WebContents* web_contents,
     const EventHandler& event_handler,
-    const GURL& origin)
+    const url::Origin& origin)
     : event_handler_(event_handler) {
   base::android::ScopedJavaLocalRef<jobject> window_android =
       content::ContentViewCore::FromWebContents(
@@ -34,7 +35,7 @@ BluetoothChooserAndroid::BluetoothChooserAndroid(
   // Create (and show) the BluetoothChooser dialog.
   JNIEnv* env = AttachCurrentThread();
   ScopedJavaLocalRef<jstring> origin_string =
-      ConvertUTF8ToJavaString(env, origin.spec());
+      ConvertUTF8ToJavaString(env, origin.Serialize());

[ncarter (slow), 2016/01/20 20:59:44]

What if the origin is unique? Do we still want to show a chooser in that case?

One way that can happen, is with <iframe sandbox>. Also, "data:" URLs are placed
in unique origins.

[Jeffrey Yasskin, 2016/01/20 21:29:58]

Good point. We don't want to show the user the string of a unique origin, but we
need to do something principled instead. According to
https://w3c.github.io/webappsec-secure-contexts/#potentially-trustworthy-origin,
data: URLs aren't secure contexts, so they won't show up here, but sandbox'ed
iframes might.

Jun, could you explicitly block unique origins in
BluetoothDispatcherHost::OnRequestDevice(), with a SecurityError ... add it to
https://code.google.com/p/chromium/codesearch/#chromium/src/third_party/WebKi...,
call it RequestDeviceWithUniqueOrigin, and in WebBluetoothError.cpp, give it the
string "requestDevice() called from sandboxed or otherwise unique origin." We'll
probably do something to allow those in the future, but we need to check with
the security-UX folks, and I don't want to block this patch on that.

[ncarter (slow), 2016/01/20 22:00:20]

Thanks for the spec link, that was good reading.

This pattern of falling back to the URL origin has come up in a couple different
places already: (see e.g.
https://code.google.com/p/chromium/codesearch#chromium/src/chrome/browser/sit...).
I am starting to wonder if it ought to be a getter that does that by default. In
any case: I'm very much open to suggestions for how to make
GetLastCommittedOrigin() easier for clients to use!

[juncai, 2016/01/21 17:47:42]

Done.

   java_dialog_.Reset(Java_BluetoothChooserDialog_create(
       env, window_android.obj(), origin_string.obj(),
       security_model_client->GetSecurityInfo().security_level,