ChildProcessSecurityPolicy::CanAccessDataForOrigin workaround to suppress bad kills

content/browser/renderer_host/media/webrtc_identity_service_host_unittest.cc

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include <deque>
 
 #include "content/browser/child_process_security_policy_impl.h"
 #include "content/browser/media/webrtc/webrtc_identity_store.h"
 #include "content/browser/renderer_host/media/webrtc_identity_service_host.h"
 #include "content/common/media/webrtc_identity_messages.h"
 #include "content/public/test/mock_resource_context.h"
 #include "content/public/test/test_browser_thread_bundle.h"
 #include "content/test/test_content_browser_client.h"
 #include "ipc/ipc_message.h"
 #include "net/base/net_errors.h"
 #include "testing/gtest/include/gtest/gtest.h"
 
 namespace content {
 
 namespace {
 
-const char FAKE_URL[] = "http://fake.com";
+const char FAKE_URL[] = "http://www.fake.com";
+const char FAKE_SITE[] = "http://fake.com";
+const char OTHER_SITE[] = "https://other.com";
 const char FAKE_FIRST_PARTY_URL[] = "http://fake.firstparty.com";
 const char FAKE_IDENTITY_NAME[] = "fake identity";
 const char FAKE_COMMON_NAME[] = "fake common name";
 const char FAKE_CERTIFICATE[] = "fake cert";
 const char FAKE_PRIVATE_KEY[] = "fake private key";
 const int FAKE_RENDERER_ID = 10;
 const int FAKE_REQUEST_ID = 1;
 
 class WebRTCIdentityServiceHostTestBrowserClient
     : public TestContentBrowserClient {
@@ skipping 191 matching lines @@
 
 TEST_F(WebRTCIdentityServiceHostTest, TestOnRequestFailed) {
   SendRequestToHost();
   store_->RunCompletionCallback(net::ERR_KEY_GENERATION_FAILED, "", "");
   VerifyRequestFailedMessage(net::ERR_KEY_GENERATION_FAILED);
 }
 
 TEST_F(WebRTCIdentityServiceHostTest, TestOriginAccessDenied) {
   ChildProcessSecurityPolicyImpl* policy =
       ChildProcessSecurityPolicyImpl::GetInstance();
-  policy->Remove(FAKE_RENDERER_ID);
+  policy->LockToOrigin(FAKE_RENDERER_ID, GURL(OTHER_SITE));
 
   SendRequestToHost();
   VerifyRequestFailedMessage(net::ERR_ACCESS_DENIED);
 }
 
+TEST_F(WebRTCIdentityServiceHostTest, TestOriginAccessAllowed) {
+  ChildProcessSecurityPolicyImpl* policy =
+      ChildProcessSecurityPolicyImpl::GetInstance();
+  policy->LockToOrigin(FAKE_RENDERER_ID, GURL(FAKE_SITE));
+
+  SendRequestToHost();
+  store_->RunCompletionCallback(net::OK, FAKE_CERTIFICATE, FAKE_PRIVATE_KEY);
+  VerifyIdentityReadyMessage(FAKE_CERTIFICATE, FAKE_PRIVATE_KEY);
+}
+
 // Verifies that we do not crash if we try to cancel a completed request.
 TEST_F(WebRTCIdentityServiceHostTest, TestCancelAfterRequestCompleted) {
   SendRequestToHost();
   store_->RunCompletionCallback(net::OK, FAKE_CERTIFICATE, FAKE_PRIVATE_KEY);
   SendCancelRequestToHost();
 }
 
 }  // namespace content