Disallow use of Web Bluetooth from cross-origin iframes.

url/origin.h

 // Copyright 2015 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef URL_ORIGIN_H_
 #define URL_ORIGIN_H_
 
 #include <stdint.h>
 
 #include <string>
@@ skipping 119 matching lines @@
   Origin(base::StringPiece scheme, base::StringPiece host, uint16_t port);
 
   SchemeHostPort tuple_;
   bool unique_;
 };
 
 URL_EXPORT std::ostream& operator<<(std::ostream& out, const Origin& origin);
 
 URL_EXPORT bool IsSameOriginWith(const GURL& a, const GURL& b);
 
+inline URL_EXPORT bool operator!=(const Origin& a, const Origin& b) {

[Jeffrey Yasskin, 2016/04/06 05:38:31]

I'm not certain it makes sense to have the non-reflexive operator==, but if we
have that, we should have != to match.

[Mike West, 2016/04/06 06:06:59]

We only added `==` for nice output in tests from `EXPECT_EQ` and the like. I
think it would be confusing for `==` or `!=` to spread further in the codebase,
given the non-reflexive behavior you noted. I don't think adding `!=` is a good
idea.

On a side note: is there a difference in behavior between this form of an
operator declaration and the class-bound form used for `==`?

[Jeffrey Yasskin, 2016/04/06 06:17:15]

Removed.
Yes: the member form allows implicit conversions (if any) for the right side of
the operator but not the left. The free function form allows implicit
conversions (if any) for both sides. For Origin they should be the same.

+  return !(a == b);
+}
+
 }  // namespace url
 
 #endif  // URL_ORIGIN_H_