Don't auto allow access to media devices unless a the security origin of the requester is the same …

chrome/browser/media/media_stream_devices_controller.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/media/media_stream_devices_controller.h"
 
 #include "base/metrics/histogram.h"
 #include "base/prefs/scoped_user_pref_update.h"
 #include "base/strings/utf_string_conversions.h"
 #include "base/values.h"
@@ skipping 480 matching lines @@
   UMA_HISTOGRAM_ENUMERATION("Media.DevicePermissionActions",
                             kCancel, kPermissionActionsMax);
   Deny(false, content::MEDIA_DEVICE_PERMISSION_DISMISSED);
 }
 
 void MediaStreamDevicesController::RequestFinished() {
   delete this;
 }
 
 bool MediaStreamDevicesController::IsRequestAllowedByDefault() const {
+  // If not all ancestors of the requesting frame have the same origin, do not
+  // allow the request per default.
+  if (!request_.all_ancestors_have_same_origin)
+    return false;
+
   // The request from internal objects like chrome://URLs is always allowed.
   if (CheckAllowAllMediaStreamContentForOrigin(profile_,
                                                request_.security_origin)) {
     return true;
   }
 
   struct {
     bool has_capability;
     const char* policy_name;
     const char* list_policy_name;
@@ skipping 165 matching lines @@
 }
 
 bool MediaStreamDevicesController::IsCaptureDeviceRequestAllowed() const {
 #if defined(OS_ANDROID)
   // Don't approve device requests if the tab was hidden.
   // TODO(qinmin): Add a test for this. http://crbug.com/396869.
   return web_contents_->GetRenderWidgetHostView()->IsShowing();
 #endif
   return true;
 }