Whitelisting exts and plugins from cross-site document blocking

content/renderer/render_process_impl.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "content/renderer/render_process_impl.h"
 
 #include "build/build_config.h"
 
 #if defined(OS_WIN)
 #include <windows.h>
 #include <objidl.h>
 #include <mlang.h>
 #endif
 
 #include "base/basictypes.h"
 #include "base/command_line.h"
 #include "base/compiler_specific.h"
 #include "base/message_loop/message_loop.h"
 #include "base/strings/utf_string_conversions.h"
 #include "base/sys_info.h"
 #include "content/child/child_thread.h"
 #include "content/child/npapi/plugin_instance.h"
 #include "content/child/npapi/plugin_lib.h"
+#include "content/child/site_isolation_policy.h"
 #include "content/common/view_messages.h"
 #include "content/public/common/content_switches.h"
 #include "content/public/renderer/content_renderer_client.h"
 #include "ipc/ipc_channel.h"
 #include "ipc/ipc_message_utils.h"
 #include "skia/ext/platform_canvas.h"
 #include "third_party/WebKit/public/web/WebFrame.h"
 #include "ui/surface/transport_dib.h"
 #include "webkit/glue/webkit_glue.h"
 
@@ skipping 31 matching lines @@
 #endif
 
   // Out of process dev tools rely upon auto break behavior.
   webkit_glue::SetJavaScriptFlags("--debugger-auto-break");
 
   const CommandLine& command_line = *CommandLine::ForCurrentProcess();
   if (command_line.HasSwitch(switches::kJavaScriptFlags)) {
     webkit_glue::SetJavaScriptFlags(
         command_line.GetSwitchValueASCII(switches::kJavaScriptFlags));
   }
+
+  // Turn on the cross-site document blocking.

[Charlie Reis, 2013/09/03 20:22:10]

nit: drop "the", add "for renderer processes."

[dsjang, 2013/09/03 22:31:30]

Done.

+  DCHECK(GetContentClient()->renderer());

[Charlie Reis, 2013/09/03 20:22:10]

No need for this DCHECK.  It's no different than crashing when we access it
below.

[dsjang, 2013/09/03 22:31:30]

Done.

+  SiteIsolationPolicy::SetPolicyEnabled(
+      GetContentClient()->renderer()->ShouldEnableSiteIsolationPolicy());
 }
 
 RenderProcessImpl::~RenderProcessImpl() {
 #ifndef NDEBUG
   int count = WebKit::WebFrame::instanceCount();
   if (count)
     DLOG(ERROR) << "WebFrame LEAKED " << count << " TIMES";
 #endif
 
   GetShutDownEvent()->Signal();
@@ skipping 156 matching lines @@
 void RenderProcessImpl::ClearTransportDIBCache() {
   for (size_t i = 0; i < arraysize(shared_mem_cache_); ++i) {
     if (shared_mem_cache_[i]) {
       FreeTransportDIB(shared_mem_cache_[i]);
       shared_mem_cache_[i] = NULL;
     }
   }
 }
 
 }  // namespace content