Explicitly reject storage access if requesting security origin is unique

content/worker/shared_worker_permission_client_proxy.cc

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "content/worker/shared_worker_permission_client_proxy.h"
 
 #include "content/child/thread_safe_sender.h"
 #include "content/common/worker_messages.h"
 #include "third_party/WebKit/public/platform/WebString.h"
 #include "url/gurl.h"
 
 namespace content {
 
 SharedWorkerPermissionClientProxy::SharedWorkerPermissionClientProxy(
     const GURL& origin_url,
+    bool is_unique_origin,
     int routing_id,
     ThreadSafeSender* thread_safe_sender)
     : origin_url_(origin_url),
+      is_unique_origin_(is_unique_origin),
       routing_id_(routing_id),
       thread_safe_sender_(thread_safe_sender) {
 }
 
 SharedWorkerPermissionClientProxy::~SharedWorkerPermissionClientProxy() {
 }
 
 bool SharedWorkerPermissionClientProxy::allowDatabase(
     const WebKit::WebString& name,
     const WebKit::WebString& display_name,
     unsigned long estimated_size) {
+  if (is_unique_origin_)
+    return false;
   bool result = false;
   thread_safe_sender_->Send(new WorkerProcessHostMsg_AllowDatabase(
       routing_id_, origin_url_, name, display_name,
       estimated_size, &result));
   return result;
 }
 
 bool SharedWorkerPermissionClientProxy::allowFileSystem() {
+  if (is_unique_origin_)
+    return false;
   bool result = false;
   thread_safe_sender_->Send(new WorkerProcessHostMsg_AllowFileSystem(
       routing_id_, origin_url_, &result));
   return result;
 }
 
 bool SharedWorkerPermissionClientProxy::allowIndexedDB(
     const WebKit::WebString& name) {
+  if (is_unique_origin_)
+    return false;
   bool result = false;
   thread_safe_sender_->Send(new WorkerProcessHostMsg_AllowIndexedDB(
       routing_id_, origin_url_, name, &result));
   return result;
 }
 
 }  // namespace content