Introduce support for origins that require process isolation.

content/browser/site_instance_impl.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CONTENT_BROWSER_SITE_INSTANCE_IMPL_H_
 #define CONTENT_BROWSER_SITE_INSTANCE_IMPL_H_
 
 #include <stddef.h>
 #include <stdint.h>
 
@@ skipping 106 matching lines @@
   static GURL GetEffectiveURL(BrowserContext* browser_context,
                               const GURL& url);
 
   // Returns true if pages loaded from |url| ought to be handled only by a
   // renderer process isolated from other sites. If --site-per-process is on the
   // command line, this is true for all sites. In other site isolation modes,
   // only a subset of sites will require dedicated processes.
   static bool DoesSiteRequireDedicatedProcess(BrowserContext* browser_context,
                                               const GURL& url);
 
+  // Add an origin to the list of origins that require process isolation.
+  // When making process model decisions for such origins, the full
+  // scheme+host+port tuple rather than eTLD+1 will be used.  SiteInstances for
+  // these origins will also use the full origin as site URL.
+  static void AddIsolatedOrigin(const url::Origin& origin);
+
+  // Register a set of isolated origins as specified on the command line with
+  // the --isolate-origins flag.  |origin_list| is the flag's value, which
+  // contains the list of comma-separated scheme-host-port origins. See
+  // AddIsolatedOrigin for definition of an isolated origin.
+  static void AddIsolatedOriginsFromCommandLine(const std::string& origin_list);
+
+  // Helper to check whether an origin requires origin-wide process isolation.
+  static bool IsIsolatedOrigin(const url::Origin& origin);
+
  private:
   friend class BrowsingInstance;
   friend class SiteInstanceTestBrowserClient;
+  FRIEND_TEST_ALL_PREFIXES(SiteInstanceTest, IsolateOriginsFromCommandLine);
 
   // Create a new SiteInstance.  Only BrowsingInstance should call this
   // directly; clients should use Create() or GetRelatedSiteInstance() instead.
   explicit SiteInstanceImpl(BrowsingInstance* browsing_instance);
 
   ~SiteInstanceImpl() override;
 
   // RenderProcessHostObserver implementation.
   void RenderProcessHostDestroyed(RenderProcessHost* host) override;
   void RenderProcessWillExit(RenderProcessHost* host) override;
   void RenderProcessExited(RenderProcessHost* host,
                            base::TerminationStatus status,
                            int exit_code) override;
 
   // Used to restrict a process' origin access rights.
   void LockToOrigin();
 
   // This gets the render process to use for default subframe site instances.
   RenderProcessHost* GetDefaultSubframeProcessHost(
       BrowserContext* browser_context,
       bool is_for_guests_only);
 
   void set_is_default_subframe_site_instance() {
     is_default_subframe_site_instance_ = true;
   }
 
+  // Tracks origins for which the entire origin should be treated as a site
+  // when making process model decisions, rather than the origin's eTLD+1. Each
+  // of these origins requires a dedicated process.
+  using IsolatedOriginSet = std::set<url::Origin>;
+  static IsolatedOriginSet* GetIsolatedOrigins();
+
   // An object used to construct RenderProcessHosts.
   static const RenderProcessHostFactory* g_render_process_host_factory_;
 
   // The next available SiteInstance ID.
   static int32_t next_site_instance_id_;
 
   // A unique ID for this SiteInstance.
   int32_t id_;
 
   // The number of active frames in this SiteInstance.
@@ skipping 20 matching lines @@
   bool is_default_subframe_site_instance_;
 
   base::ObserverList<Observer, true> observers_;
 
   DISALLOW_COPY_AND_ASSIGN(SiteInstanceImpl);
 };
 
 }  // namespace content
 
 #endif  // CONTENT_BROWSER_SITE_INSTANCE_IMPL_H_