Add URL origin checks for Service Worker (un)registration

content/browser/child_process_security_policy_impl.h

Index: content/browser/child_process_security_policy_impl.h
diff --git a/content/browser/child_process_security_policy_impl.h b/content/browser/child_process_security_policy_impl.h
index 005292cdf2b6842ee189554fde93875e8fed0774..ba73285af51827574d0a0a399d8cc23f4375db2b 100644
--- a/content/browser/child_process_security_policy_impl.h
+++ b/content/browser/child_process_security_policy_impl.h
@@ -189,6 +189,14 @@ class CONTENT_EXPORT ChildProcessSecurityPolicyImpl
   // Returns true if sending system exclusive messages is allowed.
   bool CanSendMidiSysExMessage(int child_id);
 
+  // Returns true if the specified document can register or unregister a service
+  // worker from |script_url| for scope |pattern|.
+  bool CanRegisterServiceWorker(const GURL& document_url,
+                                const GURL& pattern,
+                                const GURL& script_url);
+  bool CanUnregisterServiceWorker(const GURL& document_url,
+                                  const GURL& pattern);
+
  private:
   friend class ChildProcessSecurityPolicyInProcessBrowserTest;
   friend class ChildProcessSecurityPolicyTest;