Do not pass URLs in onUpdated events to extensions unless they have the

chrome/browser/extensions/extension_tabs_apitest.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/extensions/extension_apitest.h"
 
 #include "chrome/browser/prefs/incognito_mode_prefs.h"
 #include "chrome/browser/prefs/pref_service.h"
 #include "chrome/browser/profiles/profile.h"
 #include "chrome/browser/ui/browser.h"
@@ skipping 173 matching lines @@
   browser()->profile()->GetPrefs()->SetBoolean(prefs::kDisableScreenshots,
                                                true);
   ASSERT_TRUE(RunExtensionSubtest("tabs/capture_visible_tab",
                                   "test_disabled.html")) << message_;
 }
 
 IN_PROC_BROWSER_TEST_F(ExtensionApiTest, TabsOnUpdated) {
   ASSERT_TRUE(RunExtensionTest("tabs/on_updated")) << message_;
 }
 
+IN_PROC_BROWSER_TEST_F(ExtensionApiTest, TabsNoPermissions) {
+  ASSERT_TRUE(RunExtensionTest("tabs/no_permissions")) << message_;
+}
+
 IN_PROC_BROWSER_TEST_F(ExtensionApiTest,
                        MAYBE_FocusWindowDoesNotExitFullscreen) {
   browser()->window()->EnterFullscreen(
       GURL(), FEB_TYPE_BROWSER_FULLSCREEN_EXIT_INSTRUCTION);
   bool is_fullscreen = browser()->window()->IsFullscreen();
   ASSERT_TRUE(RunExtensionTest("window_update/focus")) << message_;
   ASSERT_EQ(is_fullscreen, browser()->window()->IsFullscreen());
 }
 
 IN_PROC_BROWSER_TEST_F(ExtensionApiTest,
@@ skipping 36 matching lines @@
       << message_;
 }
 IN_PROC_BROWSER_TEST_F(ExtensionApiTest, DISABLED_GetViewsOfCreatedWindow) {
   ASSERT_TRUE(RunExtensionSubtest("tabs/basics", "get_views_window.html"))
       << message_;
 }
 
 // Adding a new test? Awesome. But API tests are the old hotness. The
 // new hotness is extension_test_utils. See tabs_test.cc for an example.
 // We are trying to phase out many uses of API tests as they tend to be flaky.