CORS-RFC1918: Teach Workers about address spaces.

third_party/WebKit/Source/web/WebSharedWorkerImpl.cpp

Index: third_party/WebKit/Source/web/WebSharedWorkerImpl.cpp
diff --git a/third_party/WebKit/Source/web/WebSharedWorkerImpl.cpp b/third_party/WebKit/Source/web/WebSharedWorkerImpl.cpp
index b022a24b3435027138a4c151d9e74b186111e5f4..30e67dd026eeb6f0b864b6e7b450efdf0e4db698 100644
--- a/third_party/WebKit/Source/web/WebSharedWorkerImpl.cpp
+++ b/third_party/WebKit/Source/web/WebSharedWorkerImpl.cpp
@@ -342,7 +342,8 @@ void WebSharedWorkerImpl::onScriptLoaderFinished()
         startMode,
         contentSecurityPolicy ? contentSecurityPolicy->headers() : nullptr,
         starterOrigin,
-        workerClients.release());
+        workerClients.release(),
+        document->addressSpace());

[kinuko, 2016/03/03 02:46:34]

The document's completely bogus here, as it's just a shadow page created with
the same URL as the script URL-- doing the same as ServiceWorker might still
make some sense?

[Mike West, 2016/03/03 05:24:26]

Yeah. This should probably read from the script loader. It's not clear to me
that that's the right thing to do, but I think it makes sense given that the
worker will be talking to multiple documents (and should be same-origin with
each).

     m_loaderProxy = WorkerLoaderProxy::create(this);
     setWorkerThread(SharedWorkerThread::create(m_name, m_loaderProxy, *this));
     InspectorInstrumentation::scriptImported(m_loadingDocument.get(), m_mainScriptLoader->identifier(), m_mainScriptLoader->script());