Support "always allow" for runtime script execution

chrome/browser/extensions/permissions_updater.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/extensions/permissions_updater.h"
 
 #include "base/json/json_writer.h"
 #include "base/memory/ref_counted.h"
 #include "base/values.h"
 #include "chrome/browser/chrome_notification_types.h"
@@ skipping 49 matching lines @@
       PermissionsParser::GetOptionalPermissions(extension));
 
   // Make sure the active permissions contain no more than optional + default.
   scoped_refptr<PermissionSet> adjusted_active =
       PermissionSet::CreateIntersection(total_permissions, active_permissions);
 
   // Make sure the active permissions contain the default permissions.
   adjusted_active =
       PermissionSet::CreateUnion(required_permissions, adjusted_active);
 
+  // Re-add any active permissions that only match a single origin in order
+  // to persist "always run" script injection hosts.
+  URLPatternSet single_origin_explicit;
+  URLPatternSet single_origin_scriptable;
+  for (URLPatternSet::const_iterator iter =
+           active_permissions->explicit_hosts().begin();
+       iter != active_permissions->explicit_hosts().end();
+       ++iter) {
+    if (iter->MatchesSingleOrigin())
+      single_origin_explicit.AddPattern(*iter);
+  }
+  for (URLPatternSet::const_iterator iter =
+           active_permissions->scriptable_hosts().begin();
+       iter != active_permissions->scriptable_hosts().end();
+       ++iter) {
+    if (iter->MatchesSingleOrigin())
+      single_origin_scriptable.AddPattern(*iter);
+  }
+
+  adjusted_active = PermissionSet::CreateUnion(
+      adjusted_active,
+      new PermissionSet(APIPermissionSet(),
+                        ManifestPermissionSet(),
+                        single_origin_explicit,
+                        single_origin_scriptable));
+
   return adjusted_active;
 }
 
 // Divvy up the |url patterns| between those we grant and those we do not. If
 // |withhold_permissions| is false (because the requisite feature is not
 // enabled), no permissions are withheld.
 void SegregateUrlPermissions(const URLPatternSet& url_patterns,
                              bool withhold_permissions,
                              URLPatternSet* granted,
                              URLPatternSet* withheld) {
@@ skipping 241 matching lines @@
             Profile::FromBrowserContext(host->GetBrowserContext()))) {
       host->Send(new ExtensionMsg_UpdatePermissions(params));
     }
   }
 
   // Trigger the onAdded and onRemoved events in the extension.
   DispatchEvent(extension->id(), event_name, changed);
 }
 
 }  // namespace extensions