PDF: Check the loaded URL in sendScriptingMessage_().

chrome/browser/resources/pdf/pdf.js

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 'use strict';
 
 /**
  * @return {number} Width of a scrollbar in pixels
  */
 function getScrollbarWidth() {
@@ skipping 76 matching lines @@
 
 /**
  * Creates a new PDFViewer. There should only be one of these objects per
  * document.
  * @constructor
  * @param {!BrowserApi} browserApi An object providing an API to the browser.
  */
 function PDFViewer(browserApi) {
   this.browserApi_ = browserApi;
   this.originalUrl_ = this.browserApi_.getStreamInfo().originalUrl;
+  this.actualUrl_ = null;
   this.loadState_ = LoadState.LOADING;
   this.parentWindow_ = null;
   this.parentOrigin_ = null;
   this.isFormFieldFocused_ = false;
 
   this.delayedScriptingMessages_ = [];
 
   this.isPrintPreview_ = this.originalUrl_.startsWith('chrome://print');
 
   // Parse open pdf parameters.
@@ skipping 488 matching lines @@
           this.passwordScreen_.active = true;
         else
           this.passwordScreen_.deny();
         break;
       case 'getSelectedTextReply':
         this.sendScriptingMessage_(message.data);
         break;
       case 'goToPage':
         this.viewport_.goToPage(message.data.page);
         break;
+      case 'gotActualURL':
+        this.actualUrl_ = message.data.actualURL;
+        break;
       case 'loadProgress':
         this.updateProgress_(message.data.progress);
         break;
       case 'navigate':
         // If in print preview, always open a new tab.
         if (this.isPrintPreview_) {
           this.navigator_.navigate(
               message.data.url,
               Navigator.WindowOpenDisposition.NEW_BACKGROUND_TAB);
         } else {
@@ skipping 220 matching lines @@
     if (this.parentWindow_ && this.parentOrigin_) {
       var targetOrigin;
       // Only send data back to the embedder if it is from the same origin,
       // unless we're sending it to ourselves (which could happen in the case
       // of tests). We also allow documentLoaded messages through as this won't
       // leak important information.
       if (this.parentOrigin_ == window.location.origin)
         targetOrigin = this.parentOrigin_;
       else if (message.type == 'documentLoaded')
         targetOrigin = '*';
+      else if (this.actualUrl_)
+        targetOrigin = this.actualUrl_;
       else
         targetOrigin = this.originalUrl_;
       this.parentWindow_.postMessage(message, targetOrigin);
     }
   },
 
   /**
    * @type {Viewport} the viewport of the PDF viewer.
    */
   get viewport() {
     return this.viewport_;
   },
 
   /**
    * Each bookmark is an Object containing a:
    * - title
    * - page (optional)
    * - array of children (themselves bookmarks)
    * @type {Array} the top-level bookmarks of the PDF.
    */
   get bookmarks() {
     return this.bookmarks_;
   }
 };