Whitelisting exts and plugins from cross-site document blocking

chrome/renderer/chrome_content_renderer_client.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/renderer/chrome_content_renderer_client.h"
 
 #include "base/command_line.h"
 #include "base/logging.h"
 #include "base/metrics/histogram.h"
 #include "base/path_service.h"
@@ skipping 1287 matching lines @@
   }
 #endif  // !defined(OS_ANDROID)
   return false;
 }
 
 bool ChromeContentRendererClient::ShouldReportDetailedMessageForSource(
     const base::string16& source) const {
   return extensions::IsSourceFromAnExtension(source);
 }
 
+bool ChromeContentRendererClient::ShouldEnableSiteIsolationPolicy() const {
+  // SiteIsolationPolicy is off by default. We would like to activate the

[Charlie Reis, 2013/09/03 22:59:17]

nit: drop "the"

[dsjang, 2013/09/04 00:37:37]

Done.

+  // cross-site document blocking (for UMA data collection) for normal renderer
+  // processes running an normal web page from the Internet. We only turn on

[Charlie Reis, 2013/09/03 22:59:17]

nit: a normal

[dsjang, 2013/09/04 00:37:37]

Done.

+  // SiteIsolationPolicy for a renderer process that does not have the extension
+  // flag on. Currently, this cannot be turned off for resource requests from

[Charlie Reis, 2013/09/03 22:59:17]

No need to mention plugins here, since that's explained elsewhere.  Feel free to
drop the last sentence.

[dsjang, 2013/09/04 00:37:37]

Done.

+  // plugins since they request resources via their embedding renderer process.
+  CommandLine* command_line = CommandLine::ForCurrentProcess();
+  return !command_line->HasSwitch(switches::kExtensionProcess);
+}
+
 }  // namespace chrome