Keep subdomains of an isolated origin in the isolated origin's SiteInstance.

content/browser/isolated_origin_browsertest.cc

 // Copyright 2017 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "base/command_line.h"
 #include "content/browser/child_process_security_policy_impl.h"
 #include "content/browser/web_contents/web_contents_impl.h"
 #include "content/public/browser/render_process_host.h"
 #include "content/public/common/content_switches.h"
 #include "content/public/test/browser_test_utils.h"
@@ skipping 450 matching lines @@
   // isolated origins.
   EXPECT_TRUE(NavigateToURL(new_shell, foo_url));
   EXPECT_EQ(foo_process,
             new_shell->web_contents()->GetMainFrame()->GetProcess());
   EXPECT_NE(isolated_foo_process,
             new_shell->web_contents()->GetMainFrame()->GetProcess());
   EXPECT_NE(isolated_bar_process,
             new_shell->web_contents()->GetMainFrame()->GetProcess());
 }
 
+// Check that subdomains on an isolated origin (e.g., bar.isolated.foo.com)
+// also end up in the isolated origin's SiteInstance.
+IN_PROC_BROWSER_TEST_F(IsolatedOriginTest, IsolatedOriginWithSubdomain) {
+  // Start on a page with an isolated origin with a same-site iframe.
+  GURL isolated_url(embedded_test_server()->GetURL("isolated.foo.com",
+                                                   "/page_with_iframe.html"));
+  EXPECT_TRUE(NavigateToURL(shell(), isolated_url));
+
+  FrameTreeNode* root = web_contents()->GetFrameTree()->root();
+  FrameTreeNode* child = root->child_at(0);
+  scoped_refptr<SiteInstance> isolated_instance =
+      web_contents()->GetSiteInstance();
+
+  // Navigate iframe to the isolated origin's subdomain.
+  GURL isolated_subdomain_url(
+      embedded_test_server()->GetURL("bar.isolated.foo.com", "/title1.html"));
+  NavigateIframeToURL(web_contents(), "test_iframe", isolated_subdomain_url);
+  EXPECT_EQ(child->current_url(), isolated_subdomain_url);
+
+  EXPECT_EQ(isolated_instance, child->current_frame_host()->GetSiteInstance());
+  EXPECT_FALSE(child->current_frame_host()->IsCrossProcessSubframe());
+  EXPECT_EQ(isolated_url.GetOrigin(),
+            child->current_frame_host()->GetSiteInstance()->GetSiteURL());
+
+  // Now try navigating the main frame (renderer-initiated) to the isolated
+  // origin's subdomain.  This should not swap processes.
+  TestNavigationObserver observer(web_contents());
+  EXPECT_TRUE(
+      ExecuteScript(web_contents(),
+                    "location.href = '" + isolated_subdomain_url.spec() + "'"));
+  observer.Wait();
+  EXPECT_EQ(isolated_instance, web_contents()->GetSiteInstance());
+}
+
 }  // namespace content