Introduce support for origins that require process isolation.

content/common/site_isolation_policy.cc

 // Copyright 2015 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "content/common/site_isolation_policy.h"
 
 #include "base/command_line.h"
 #include "base/feature_list.h"
 #include "content/public/common/content_client.h"
 #include "content/public/common/content_features.h"
 #include "content/public/common/content_switches.h"
 
 namespace content {
 
 // static
 bool SiteIsolationPolicy::AreCrossProcessFramesPossible() {
 // Before turning this on for Android, input event routing needs to be
 // completed there, and perf regressions in https://crbug.com/690229 need to be
 // investigated.
 #if defined(OS_ANDROID)
   return UseDedicatedProcessesForAllSites() ||
-         IsTopDocumentIsolationEnabled() ||
+         IsTopDocumentIsolationEnabled() || AreIsolatedOriginsEnabled() ||

[alexmos, 2017/05/03 23:31:08]

I'm a bit sad about this, as I'd love to just enable
AreCrossProcessFramesPossible for Android and then remove it everywhere, but
it's not clear how soon we can do that.  Even with hit testing fixed, we still
have issue 690229 (and possibly others?), so it seems we'll need a workaround
here in the short term.  I ended up just adding the plumbing for the
command-line switch to this CL, since it wasn't that much and we'll need to
expose it anyway.  But we'll need to come back to this if we bake
accounts.google.com into a whitelist without a flag, or when the set of isolated
origins starts to change dynamically (should we enable
AreCrossProcessFramesPossible only when there's 1+ isolated origin, etc). 
Another problem is that the renderer currently also needs it for a couple of
CHECKs, which is the reason I also have to include the new switch in
PropagateBrowserCommandLineToRenderer.

          GetContentClient()->IsSupplementarySiteIsolationModeEnabled() ||
          base::FeatureList::IsEnabled(::features::kGuestViewCrossProcessFrames);
 #else
   return true;
 #endif
 }
 
 // static
 bool SiteIsolationPolicy::UseDedicatedProcessesForAllSites() {
   return base::CommandLine::ForCurrentProcess()->HasSwitch(
       switches::kSitePerProcess);
 }
 
 // static
 bool SiteIsolationPolicy::IsTopDocumentIsolationEnabled() {
   // --site-per-process trumps --top-document-isolation.
   if (UseDedicatedProcessesForAllSites())
     return false;
 
   return base::CommandLine::ForCurrentProcess()->HasSwitch(
       switches::kTopDocumentIsolation);
 }
 
+// static
+bool SiteIsolationPolicy::AreIsolatedOriginsEnabled() {
+  // TODO(alexmos): This currently assumes that isolated origins are only added
+  // via the command-line switch, which may not be true in the future.  Remove
+  // this function when AreCrossProcessFramesPossible becomes true on Android
+  // above.
+  return base::CommandLine::ForCurrentProcess()->HasSwitch(
+      switches::kIsolateOrigins);
+}
+
 }  // namespace content