Whitelisting exts and plugins from cross-site document blocking

content/renderer/render_process_impl.cc

Index: content/renderer/render_process_impl.cc
diff --git a/content/renderer/render_process_impl.cc b/content/renderer/render_process_impl.cc
index 23537011e640aa830dd574bb1d78caaab9818906..e73d305d27f3273b8447da28a4c88d1c5264537b 100644
--- a/content/renderer/render_process_impl.cc
+++ b/content/renderer/render_process_impl.cc
@@ -21,6 +21,7 @@
 #include "content/child/child_thread.h"
 #include "content/child/npapi/plugin_instance.h"
 #include "content/child/npapi/plugin_lib.h"
+#include "content/child/site_isolation_policy.h"
 #include "content/common/view_messages.h"
 #include "content/public/common/content_switches.h"
 #include "content/public/renderer/content_renderer_client.h"
@@ -72,6 +73,11 @@ RenderProcessImpl::RenderProcessImpl()
     webkit_glue::SetJavaScriptFlags(
         command_line.GetSwitchValueASCII(switches::kJavaScriptFlags));
   }
+
+  // Turn on the cross-site document blocking.

[Charlie Reis, 2013/09/03 20:22:10]

nit: drop "the", add "for renderer processes."

[dsjang, 2013/09/03 22:31:30]

Done.

+  DCHECK(GetContentClient()->renderer());

[Charlie Reis, 2013/09/03 20:22:10]

No need for this DCHECK.  It's no different than crashing when we access it
below.

[dsjang, 2013/09/03 22:31:30]

Done.

+  SiteIsolationPolicy::SetPolicyEnabled(
+      GetContentClient()->renderer()->ShouldEnableSiteIsolationPolicy());
 }
 
 RenderProcessImpl::~RenderProcessImpl() {