Fix extension bindings injection for iframes (reland)

extensions/renderer/script_context.h

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef EXTENSIONS_RENDERER_SCRIPT_CONTEXT_H_
 #define EXTENSIONS_RENDERER_SCRIPT_CONTEXT_H_
 
+#include <memory>
 #include <string>
 #include <utility>
 #include <vector>
 
 #include "base/callback.h"
 #include "base/compiler_specific.h"
 #include "base/macros.h"
 #include "base/threading/thread_checker.h"
 #include "extensions/common/features/feature.h"
 #include "extensions/common/permissions/api_permission_set.h"
@@ skipping 132 matching lines @@
   // Returns whether the API |api| or any part of the API could be
   // available in this context without taking into account the context's
   // extension.
   bool IsAnyFeatureAvailableToContext(const extensions::Feature& api);
 
   // Utility to get the URL we will match against for a frame. If the frame has
   // committed, this is the commited URL. Otherwise it is the provisional URL.
   // The returned URL may be invalid.
   static GURL GetDataSourceURLForFrame(const blink::WebFrame* frame);
 
+  // Similar to GetDataSourceURLForFrame, but only returns the data source URL
+  // if the frame's document url is empty and the frame has a security origin
+  // that allows access to the data source url.
+  // TODO(asargent/devlin) - there may be places that should switch to using
+  // this instead of GetDataSourceURLForFrame.
+  static GURL GetAccessCheckedFrameURL(const blink::WebFrame* frame);
+
   // Returns the first non-about:-URL in the document hierarchy above and
   // including |frame|. The document hierarchy is only traversed if
   // |document_url| is an about:-URL and if |match_about_blank| is true.
   static GURL GetEffectiveDocumentURL(const blink::WebFrame* frame,
                                       const GURL& document_url,
                                       bool match_about_blank);
 
   // RequestSender::Source implementation.
   ScriptContext* GetContext() override;
   void OnResponseReceived(const std::string& name,
@@ skipping 80 matching lines @@
   std::unique_ptr<Runner> runner_;
 
   base::ThreadChecker thread_checker_;
 
   DISALLOW_COPY_AND_ASSIGN(ScriptContext);
 };
 
 }  // namespace extensions
 
 #endif  // EXTENSIONS_RENDERER_SCRIPT_CONTEXT_H_