content/browser/worker_host implements the browser side of web workers (dedicated workers and shared workers). It tracks the security principal of the worker in the renderer and uses it to broker access to mojo interfaces providing powerful web APIs. See: Design doc.
The renderer side implementations are in content/renderer/worker.