Don't auto allow access to media devices unless a the security origin of the requester is the same …

content/public/common/media_stream_request.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "content/public/common/media_stream_request.h"
 
 #include "base/logging.h"
 
 namespace content {
 
@@ skipping 69 matching lines @@
     if (iter->id == device_id)
       return &(*iter);
   }
   return NULL;
 }
 
 MediaStreamRequest::MediaStreamRequest(
     int render_process_id,
     int render_frame_id,
     int page_request_id,
+    const std::string& tab_capture_device_id,
     const GURL& security_origin,
     bool user_gesture,
     MediaStreamRequestType request_type,
     const std::string& requested_audio_device_id,
     const std::string& requested_video_device_id,
     MediaStreamType audio_type,
     MediaStreamType video_type)
     : render_process_id(render_process_id),
       render_frame_id(render_frame_id),
       page_request_id(page_request_id),
+      tab_capture_device_id(tab_capture_device_id),
       security_origin(security_origin),
       user_gesture(user_gesture),
       request_type(request_type),
       requested_audio_device_id(requested_audio_device_id),
       requested_video_device_id(requested_video_device_id),
       audio_type(audio_type),
-      video_type(video_type) {
+      video_type(video_type),
+      all_ancestors_have_same_origin(false) {
 }
 
 MediaStreamRequest::~MediaStreamRequest() {}
 
 }  // namespace content