Prevent appcache creation from suborigins and sandboxed pages.

third_party/WebKit/Source/core/loader/appcache/ApplicationCacheHost.h

 /*
  * Copyright (c) 2009, Google Inc.  All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions are
  * met:
  *
  *     * Redistributions of source code must retain the above copyright
  * notice, this list of conditions and the following disclaimer.
  *     * Redistributions in binary form must reproduce the above
@@ skipping 14 matching lines @@
  * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
  * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
  * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
  * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
  */
 
 #ifndef ApplicationCacheHost_h
 #define ApplicationCacheHost_h
 
 #include <memory>
+#include "base/gtest_prod_util.h"
+#include "core/CoreExport.h"
 #include "platform/heap/Handle.h"
 #include "platform/weborigin/KURL.h"
 #include "platform/wtf/Allocator.h"
 #include "platform/wtf/Vector.h"
 #include "public/platform/WebApplicationCacheHostClient.h"
 
 namespace blink {
 class ApplicationCache;
 class DocumentLoader;
 class ResourceRequest;
 class ResourceResponse;
 
-class ApplicationCacheHost final
+class CORE_EXPORT ApplicationCacheHost final
     : public GarbageCollectedFinalized<ApplicationCacheHost>,
-      public WebApplicationCacheHostClient {
+      NON_EXPORTED_BASE(public WebApplicationCacheHostClient) {
   WTF_MAKE_NONCOPYABLE(ApplicationCacheHost);
 
  public:
   static ApplicationCacheHost* Create(DocumentLoader* loader) {
     return new ApplicationCacheHost(loader);
   }
 
   virtual ~ApplicationCacheHost();
   void DetachFromDocumentLoader();
 
@@ skipping 147 matching lines @@
 
   void DispatchDOMEvent(EventID,
                         int progress_total,
                         int progress_done,
                         WebApplicationCacheHost::ErrorReason,
                         const String& error_url,
                         int error_status,
                         const String& error_message);
 
   std::unique_ptr<WebApplicationCacheHost> host_;
+
+  FRIEND_TEST_ALL_PREFIXES(DocumentTest, SandboxDisablesAppCache);
+  FRIEND_TEST_ALL_PREFIXES(DocumentTest, SuboriginDisablesAppCache);
 };
 
 }  // namespace blink
 
 #endif  // ApplicationCacheHost_h