Make sure that a given app/extension requests only its own resources.

chrome/browser/extensions/api/api_resource.cc

Index: chrome/browser/extensions/api/api_resource.cc
diff --git a/chrome/browser/extensions/api/api_resource.cc b/chrome/browser/extensions/api/api_resource.cc
index 400acded39f77ce83bd8bc6b5c4cdcd9b3d05f77..19b7b9137b0c8eab80f631499378e82a4df4420e 100644
--- a/chrome/browser/extensions/api/api_resource.cc
+++ b/chrome/browser/extensions/api/api_resource.cc
@@ -7,8 +7,15 @@
 
 namespace extensions {
 
-ApiResource::ApiResource(ApiResourceEventNotifier* event_notifier)
-    : event_notifier_(event_notifier) {
+ApiResource::ApiResource(const std::string& owner_extension_id,
+                         ApiResourceEventNotifier* event_notifier)
+    : owner_extension_id_(owner_extension_id),
+      event_notifier_(event_notifier) {
+
+  CHECK(!owner_extension_id_.empty());
+  if (event_notifier)
+    CHECK(event_notifier->src_extension_id() == owner_extension_id_);
+
   // scoped_refptr<> constructor does the initial AddRef() for us on
   // event_notifier_.
 }