BlobUrlBrowserTest: Add a test exercising blob: URLs from file:// documents.

content/browser/frame_host/render_frame_host_manager.cc

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "content/browser/frame_host/render_frame_host_manager.h"
 
 #include <stddef.h>
 
 #include <algorithm>
 #include <utility>
@@ skipping 1381 matching lines @@
   // chrome://crash, however.
   // TODO(creis): Refactor this method so this duplicated code isn't needed.
   // See http://crbug.com/123007.
   if (current_entry &&
       current_entry->IsViewSourceMode() != dest_is_view_source_mode &&
       !IsRendererDebugURL(dest_url)) {
     return SiteInstanceDescriptor(browser_context, dest_url,
                                   SiteInstanceRelation::UNRELATED);
   }
 
-  // Use the source SiteInstance in case of data URLs or about:blank pages,
-  // because the content is then controlled and/or scriptable by the source
-  // SiteInstance.
-  GURL about_blank(url::kAboutBlankURL);
-  if (source_instance &&
-      (dest_url == about_blank || dest_url.scheme() == url::kDataScheme)) {
-    return SiteInstanceDescriptor(source_instance);
+  if (source_instance) {
+    // Use the source SiteInstance in case of data URLs or about:blank pages,
+    // because the content is then controlled and/or scriptable by the source
+    // SiteInstance.
+    GURL about_blank(url::kAboutBlankURL);
+    if (dest_url == about_blank || dest_url.SchemeIs(url::kDataScheme))
+      return SiteInstanceDescriptor(source_instance);
+    // Process transfers for filesystem and blob URLs work similarly:
+    // Although these URLs have origins, they are disallowed in
+    // cross-origin contexts. So the only site instance swap we
+    // allow is to |source_instance|.
+    if (dest_url.SchemeIsBlob() || dest_url.SchemeIsFileSystem()) {
+      // TODO(nick): do we need to check for origin safety? Are we downstream
+      // of existing enforcement or what?
+      return SiteInstanceDescriptor(source_instance);
+    }
   }
 
   // Use the current SiteInstance for same site navigations.
   if (IsCurrentlySameSite(render_frame_host_.get(), dest_url))
     return SiteInstanceDescriptor(render_frame_host_->GetSiteInstance());
 
   if (SiteIsolationPolicy::IsTopDocumentIsolationEnabled()) {
     // TODO(nick): Looking at the main frame and openers is required for TDI
     // mode, but should be safe to enable unconditionally.
     if (!frame_tree_node_->IsMainFrame()) {
@@ skipping 1298 matching lines @@
                                              resolved_url)) {
     DCHECK(!dest_instance ||
            dest_instance == render_frame_host_->GetSiteInstance());
     return false;
   }
 
   return true;
 }
 
 }  // namespace content