Pass RenderFrameHost to WebContentObservers' message handlers

content/public/browser/web_contents_observer.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CONTENT_PUBLIC_BROWSER_WEB_CONTENTS_OBSERVER_H_
 #define CONTENT_PUBLIC_BROWSER_WEB_CONTENTS_OBSERVER_H_
 
 #include "base/process/kill.h"
 #include "base/process/process_handle.h"
 #include "content/common/content_export.h"
@@ skipping 314 matching lines @@
   // Invoked when the beforeunload handler fires. The time is from the renderer.
   virtual void BeforeUnloadFired(const base::TimeTicks& proceed_time) {}
 
   // Invoked when a user cancels a before unload dialog.
   virtual void BeforeUnloadDialogCancelled() {}
 
   // Invoked when an accessibility event is received from the renderer.
   virtual void AccessibilityEventReceived(
       const std::vector<AXEventNotificationDetails>& details) {}
 
+  // Invoked if an IPC message is coming from a specific RenderFrameHost.  This
+  // handler is called for messages sent from renderers via RenderFrame::Send or
+  // RenderFrameObserver::Send. Such messages are not passed to the generic
+  // OnMessageReceived handler (derived from IPC::Listener) to avoid
+  // possibilities for cross-site interaction.

[jam, 2014/05/02 19:41:22]

nit: remove "or RenderFrameObserver::Send" since there are various wayts to get
to RF::Send and we don't want to enumerate them all here.

"cross-site interaction" is going to be a bit cryptic for most devs. i would
just remove this last sentance.

[mnaganov (inactive), 2014/05/06 09:06:46]

Done.

+  virtual bool OnMessageReceived(const IPC::Message& message,
+                                 RenderFrameHost* render_frame_host);
+
   // IPC::Listener implementation.
   virtual bool OnMessageReceived(const IPC::Message& message) OVERRIDE;
 
   // IPC::Sender implementation.
   virtual bool Send(IPC::Message* message) OVERRIDE;
   int routing_id() const;
 
  protected:
   // Use this constructor when the object is tied to a single WebContents for
   // its entire lifetime.
@@ skipping 19 matching lines @@
   void WebContentsImplDestroyed();
 
   WebContentsImpl* web_contents_;
 
   DISALLOW_COPY_AND_ASSIGN(WebContentsObserver);
 };
 
 }  // namespace content
 
 #endif  // CONTENT_PUBLIC_BROWSER_WEB_CONTENTS_OBSERVER_H_