Add suborigin logic to url::Origin

content/public/browser/dom_storage_context.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CONTENT_PUBLIC_BROWSER_DOM_STORAGE_CONTEXT_H_
 #define CONTENT_PUBLIC_BROWSER_DOM_STORAGE_CONTEXT_H_
 
 #include <string>
 #include <vector>
 
@@ skipping 22 matching lines @@
   // Returns a collection of origins using local storage to the given callback.
   virtual void GetLocalStorageUsage(
       const GetLocalStorageUsageCallback& callback) = 0;
 
   // Returns a collection of origins using session storage to the given
   // callback.
   virtual void GetSessionStorageUsage(
       const GetSessionStorageUsageCallback& callback) = 0;
 
   // Deletes the local storage data for the given origin.
+  //
+  // |origin| must not be a suborigin. For the given origin, it will delete
+  // all localStorage associated with suborigins at the physical origin of
+  // |origin|. (that is, deletion of http://example.com will also delete
+  // http-so://foo.example.com). See
+  // https://w3c.github.io/webappsec-suborigins/.
+  virtual void DeleteLocalStorageForPhysicalOrigin(const GURL& origin) = 0;
+
+  // Same as above, but extracts the physical origin from |origin| to do the
+  // deletion, so it is unnecessary to guarantee that |origin| doesn't have a
+  // suborigin.
   virtual void DeleteLocalStorage(const GURL& origin) = 0;

[michaeln, 2016/10/21 23:07:12]

Looking at this again i think we should retain the ability to delete a singular
area, and add a seperate function to delete the multiple areas related to a
physorigin. The latter function builds on the former function. There are very
few callsites, so updating to use DeleteLocalStorageForPhysicalOrigin() where
appropiate is easy enough.

DeleteLocalStorage() deletes just one specific <schm,host,port> identified
DOMStorageArea (the function you're CL is currently calling
DeleteAndClearStorageNamespaceForOrigin) 

and 

DeleteLocalStorageForPhysicalOrigin() deletes all areas (top level and sub
origins) for the ori.PhysOrigin of the origin provided.

[jww, 2016/10/22 00:43:12]

Done.

 
   // Deletes the session storage data identified by |usage_info|.
   virtual void DeleteSessionStorage(
       const SessionStorageUsageInfo& usage_info) = 0;
 
   // If this is called, sessionStorage data will be stored on disk, and can be
   // restored after a browser restart (with RecreateSessionStorage). This
   // function must be called right after DOMStorageContextWrapper is created,
   // and before it's used.
   virtual void SetSaveSessionStorageOnDisk() = 0;
@@ skipping 10 matching lines @@
   // been created after a session restore, or a session restore won't happen.
   virtual void StartScavengingUnusedSessionStorage() = 0;
 
  protected:
   virtual ~DOMStorageContext() {}
 };
 
 }  // namespace content
 
 #endif  // CONTENT_PUBLIC_BROWSER_DOM_STORAGE_CONTEXT_H_