Whitelisting exts and plugins from cross-site document blocking

content/public/renderer/content_renderer_client.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CONTENT_PUBLIC_RENDERER_CONTENT_RENDERER_CLIENT_H_
 #define CONTENT_PUBLIC_RENDERER_CONTENT_RENDERER_CLIENT_H_
 
 #include <string>
 
 #include "base/memory/weak_ptr.h"
@@ skipping 232 matching lines @@
 
   // Returns true if the page at |url| can use Pepper MediaStream APIs.
   virtual bool AllowPepperMediaStreamAPI(const GURL& url);
 
   // Returns true if we should report a detailed message (including a stack
   // trace) for console [logs|errors|exceptions]. |source| is the WebKit-
   // reported source for the error; this can point to a page or a script,
   // and can be external or internal.
   virtual bool ShouldReportDetailedMessageForSource(
       const base::string16& source) const;
+
+  // Returns true if we apply the cross-site document blocking policy to this

[Charlie Reis, 2013/09/03 22:59:17]

nit: if we should

[dsjang, 2013/09/04 00:37:37]

Done.

+  // renderer process. Currently, we apply the policy only to a renderer process
+  // running on a normal page from the web. The cross-site document blocking
+  // policy is not applied to plugin processes too, and it's done in

[Charlie Reis, 2013/09/03 22:59:17]

Better, but I'm still having trouble following the last sentence.  Perhaps:

The policy should not be applied to plugin processes, which currently proxy
their network requests through renderer processes.  As a result,
SiteIsolationPolicy checks for plugin requests in renderer processes at runtime
and ignores them.

[dsjang, 2013/09/04 00:37:37]

Done.

+  // SiteIsolationPolicy at runtime since requests from a plugin are proxed via
+  // the renderer process that spawned the plugin.
+  virtual bool ShouldEnableSiteIsolationPolicy() const;
 };
 
 }  // namespace content
 
 #endif  // CONTENT_PUBLIC_RENDERER_CONTENT_RENDERER_CLIENT_H_