Don't allow targeted navigations across BrowsingInstances.

content/public/browser/render_view_host_delegate.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CONTENT_PUBLIC_BROWSER_RENDER_VIEW_HOST_DELEGATE_H_
 #define CONTENT_PUBLIC_BROWSER_RENDER_VIEW_HOST_DELEGATE_H_
 #pragma once
 
 #include <string>
 #include <vector>
@@ skipping 266 matching lines @@
   // The RenderView's main frame document element is ready. This happens when
   // the document has finished parsing.
   virtual void DocumentAvailableInMainFrame(RenderViewHost* render_view_host) {}
 
   // The onload handler in the RenderView's main frame has completed.
   virtual void DocumentOnLoadCompletedInMainFrame(
       RenderViewHost* render_view_host,
       int32 page_id) {}
 
   // The page wants to open a URL with the specified disposition.
-  virtual void RequestOpenURL(const GURL& url,
+  virtual void RequestOpenURL(RenderViewHost* rvh,
+                              const GURL& url,
                               const content::Referrer& referrer,
                               WindowOpenDisposition disposition,
                               int64 source_frame_id) {}
 
   // The page wants to transfer the request to a new renderer.
   virtual void RequestTransferURL(
       const GURL& url,
       const content::Referrer& referrer,
       WindowOpenDisposition disposition,
       int64 source_frame_id,
@@ skipping 104 matching lines @@
   // Notification that the view has lost the mouse lock.
   virtual void LostMouseLock() {}
 
  protected:
   virtual ~RenderViewHostDelegate() {}
 };
 
 }  // namespace content
 
 #endif  // CONTENT_PUBLIC_BROWSER_RENDER_VIEW_HOST_DELEGATE_H_