Extensions: run "custom bindings" v8-extensions in content scripts.

chrome/renderer/extensions/schema_generated_bindings.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/renderer/extensions/schema_generated_bindings.h"
 
 #include <map>
 #include <set>
 #include <string>
 
@@ skipping 142 matching lines @@
     } else {
       ExtensionAPI::GetInstance()->GetSchemasForExtension(*extension, &schemas);
     }
 
     v8::Persistent<v8::Context> context(v8::Context::New());
     v8::Context::Scope context_scope(context);
     v8::Handle<v8::Array> api(v8::Array::New(schemas.size()));
     size_t api_index = 0;
     for (ExtensionAPI::SchemaMap::iterator it = schemas.begin();
         it != schemas.end(); ++it) {
-      api->Set(api_index, GetV8SchemaForAPI(self, context, it->first));
+      std::string api_name = it->first;
+      // For content scripts, only allow APIs that have unprivileged components.
+      if (v8_context->context_type() == ChromeV8Context::CONTENT_SCRIPT &&
+          ExtensionAPI::GetInstance()->IsWholeAPIPrivileged(api_name)) {
+        continue;
+      }
+      api->Set(api_index, GetV8SchemaForAPI(self, context, api_name));
       ++api_index;
     }
 
     // The persistent extension_api_ will keep the context alive.
     context.Dispose();
 
     return api;
   }
 
   static v8::Handle<v8::Value> GetNextRequestId(const v8::Arguments& args) {
@@ skipping 232 matching lines @@
     const std::string& extension_id) {
   for (PendingRequestMap::const_iterator it = g_pending_requests.Get().begin();
        it != g_pending_requests.Get().end(); ++it) {
     if (it->second->extension_id == extension_id)
       return true;
   }
   return false;
 }
 
 }  // namespace