Added check to prevent extensions from injecting scrips into other extensions

chrome/browser/extensions/api/tabs/execute_code_in_tab_function.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/extensions/api/tabs/execute_code_in_tab_function.h"
 
 #include "base/bind.h"
 #include "base/string_util.h"
 #include "base/utf_string_conversions.h"
 #include "chrome/browser/extensions/api/tabs/tabs.h"
@@ skipping 60 matching lines @@
   if (!ExtensionTabUtil::GetTabById(execute_tab_id_, profile(),
                                     include_incognito(),
                                     NULL, NULL, &contents, NULL)) {
     return false;
   }
 
   // NOTE: This can give the wrong answer due to race conditions, but it is OK,
   // we check again in the renderer.
   CHECK(contents);
   if (!GetExtension()->CanExecuteScriptOnPage(
-          contents->web_contents()->GetURL(), execute_tab_id_, NULL, &error_)) {
+          contents->web_contents()->GetURL(),
+          contents->web_contents()->GetURL(),
+          execute_tab_id_,
+          NULL,
+          &error_)) {
     return false;
   }
 
   if (details_->code.get())
     return Execute(*details_->code);
 
   CHECK(details_->file.get());
   resource_ = GetExtension()->GetResource(*details_->file);
 
   if (resource_.extension_root().empty() || resource_.relative_path().empty()) {
@@ skipping 172 matching lines @@
   contents->extension_tab_helper()->script_executor()->ExecuteScript(
       extension->id(),
       script_type,
       code_string,
       frame_scope,
       run_at,
       ScriptExecutor::ISOLATED_WORLD,
       base::Bind(&ExecuteCodeInTabFunction::OnExecuteCodeFinished, this));
   return true;
 }