Explicitly reject storage access if requesting security origin is unique

content/worker/websharedworkerclient_proxy.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "content/worker/websharedworkerclient_proxy.h"
 
 #include "base/bind.h"
 #include "base/command_line.h"
 #include "base/message_loop/message_loop.h"
 #include "content/child/webmessageportchannel_impl.h"
@@ skipping 63 matching lines @@
                                             client);
   // Remember the id of the instance we create so we have access to that
   // value when creating nested dedicated workers in createWorker.
   appcache_host_id_ = host->host_id();
   return host;
 }
 
 WebKit::WebWorkerPermissionClientProxy*
 WebSharedWorkerClientProxy::createWorkerPermissionClientProxy(
     const WebKit::WebSecurityOrigin& origin) {
-  if (origin.isUnique())
-    return NULL;

[michaeln, 2013/11/01 18:22:46]

right... no proxy means "allowed" by default which is not what we want for
unique origins

   return new SharedWorkerPermissionClientProxy(
-      GURL(origin.toString()), route_id_,
+      GURL(origin.toString()), origin.isUnique(), route_id_,
       ChildThread::current()->thread_safe_sender());
 }
 
 // TODO(kinuko): Deprecate these methods.
 bool WebSharedWorkerClientProxy::allowDatabase(WebFrame* frame,
                                          const WebString& name,
                                          const WebString& display_name,
                                          unsigned long estimated_size) {
   return false;
 }
@@ skipping 28 matching lines @@
   // page. It's ok to post several of theese, because the first executed task
   // will exit the message loop and subsequent ones won't be executed.
   base::MessageLoop::current()->PostDelayedTask(
       FROM_HERE,
       base::Bind(&WebSharedWorkerClientProxy::workerContextDestroyed,
                  weak_factory_.GetWeakPtr()),
       base::TimeDelta::FromSeconds(kMaxTimeForRunawayWorkerSeconds));
 }
 
 }  // namespace content