Start renderer in ContentViewCoreImpl::EvaluateJavaScript.

content/browser/web_contents/web_contents_impl.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CONTENT_BROWSER_WEB_CONTENTS_WEB_CONTENTS_IMPL_H_
 #define CONTENT_BROWSER_WEB_CONTENTS_WEB_CONTENTS_IMPL_H_
 
 #include <map>
 #include <set>
 #include <string>
@@ skipping 135 matching lines @@
   // No interstitial page should already be attached.
   void AttachInterstitialPage(InterstitialPageImpl* interstitial_page);
 
   // Unsets the currently showing interstitial.
   void DetachInterstitialPage();
 
 #if defined(OS_ANDROID)
   JavaBridgeDispatcherHostManager* java_bridge_dispatcher_host_manager() const {
     return java_bridge_dispatcher_host_manager_.get();
   }
+
+  // In Android WebView, the RenderView needs created even there is no
+  // navigation entry, so the JavaScript could executed without loading page.
+  bool CreateRenderViewWithoutNavigationEntry(RenderViewHost* render_view_host);

[Charlie Reis, 2013/08/20 22:03:49]

This is not ok to add.  For security reasons, there always needs to be a
SiteInstance and NavigationEntry for a WebContents to have a renderer process. 
(The SiteInstance and NavigationEntry dictate what permissions are granted to
the process, as well as which other pages need to end up in the same process to
ensure they can script each other.)

[Charlie Reis, 2013/08/21 22:06:26]

If we are going to go down this road, we need to be much more explicit.  The
method should be CreateRenderViewForInitialEmptyDocument, and it should clearly
state that this allows Android WebViews to use javascript: URLs that load into
the DOMWindow before the first page load.  We need to be very explicit that this
is not safe to do in any context that a web page could get a reference to the
DOMWindow before the first page load.

Also, this should not take in a RenderViewHost, since it's only safe to do this
with the current RednerViewHost of the WebContents.

 #endif
 
   // Expose the render manager for testing.
   RenderViewHostManager* GetRenderManagerForTesting();
 
   // Returns guest browser plugin object, or NULL if this WebContents is not a
   // guest.
   BrowserPluginGuest* GetBrowserPluginGuest() const;
 
   // Sets a BrowserPluginGuest object for this WebContents. If this WebContents
@@ skipping 578 matching lines @@
 
   // Removes browser plugin embedder if there is one.
   void RemoveBrowserPluginEmbedder();
 
   // Clear |render_view_host|'s PowerSaveBlockers.
   void ClearPowerSaveBlockers(RenderViewHost* render_view_host);
 
   // Clear all PowerSaveBlockers, leave power_save_blocker_ empty.
   void ClearAllPowerSaveBlockers();
 
+  bool CreateRenderView(RenderViewHost* render_view_host,

[Charlie Reis, 2013/08/20 22:03:49]

Please do not add this.  max_page_id is an extremely difficult concept to get
right and can lead to URL spoofs and renderer crashes if specified incorrectly.

+                        int opener_route_id,
+                        int max_page_id);
+
   // Data for core operation ---------------------------------------------------
 
   // Delegate for notifying our owner about stuff. Not owned by us.
   WebContentsDelegate* delegate_;
 
   // Handles the back/forward list and loading.
   NavigationControllerImpl controller_;
 
   // The corresponding view.
   scoped_ptr<WebContentsViewPort> view_;
@@ skipping 191 matching lines @@
   // Maps the ids of pending image downloads to their callbacks
   typedef std::map<int, ImageDownloadCallback> ImageDownloadMap;
   ImageDownloadMap image_download_map_;
 
   DISALLOW_COPY_AND_ASSIGN(WebContentsImpl);
 };
 
 }  // namespace content
 
 #endif  // CONTENT_BROWSER_WEB_CONTENTS_WEB_CONTENTS_IMPL_H_