Async Cookies: Security checks for RestrictedCookieManager.

RestrictedCookieManager becomes scoped to an origin, and rejects
operations on cookies which aren't accessible to that origin.
RestrictedCookieManager instances are passed to (untrusted) renderer
processes from the browser's RendererInterfaceBinders, which knows which
origins are accessible to each renderer.

Bug: 729800
Cq-Include-Trybots: master.tryserver.chromium.linux:linux_mojo
Change-Id: I638b0a93cac36cd1b3b4f1bf2f767f1810b11003
Reviewed-on: https://chromium-review.googlesource.com/1069652
Reviewed-by: Kinuko Yasuda <kinuko@chromium.org>
Reviewed-by: Daniel Cheng <dcheng@chromium.org>
Reviewed-by: Reilly Grant <reillyg@chromium.org>
Reviewed-by: Joshua Bell <jsbell@chromium.org>
Commit-Queue: Victor Costan <pwnall@chromium.org>
Cr-Commit-Position: refs/heads/master@{#564272}
12 files changed