Part of unforking Location. We make a bunch of Location related...

webkit/port/bindings/v8/v8_proxy.cpp

 // Copyright (c) 2008, Google Inc.
 // All rights reserved.
 // 
 // Redistribution and use in source and binary forms, with or without
 // modification, are permitted provided that the following conditions are
 // met:
 // 
 //     * Redistributions of source code must retain the above copyright
 // notice, this list of conditions and the following disclaimer.
 //     * Redistributions in binary form must reproduce the above
@@ skipping 1742 matching lines @@
       // When a context is detached from a frame, turn on the access check.
       // Turning on checks also invalidates inline caches of the object.
       instance_template->SetAccessCheckCallbacks(
           V8Custom::v8DOMWindowNamedSecurityCheck,
           V8Custom::v8DOMWindowIndexedSecurityCheck,
           v8::Integer::New(V8ClassIndex::DOMWINDOW),
           false);
       break;
     }
     case V8ClassIndex::LOCATION: {
+      // For security reasons, these functions are on the instance
+      // instead of on the prototype object to insure that they cannot
+      // be overwritten.
+      v8::Local<v8::ObjectTemplate> instance = desc->InstanceTemplate();
+      instance->SetAccessor(
+        v8::String::New("reload"),
+        V8Custom::v8LocationReloadAccessorGetter,
+        0,
+        v8::Handle<v8::Value>(),
+        v8::ALL_CAN_READ,
+        static_cast<v8::PropertyAttribute>(v8::DontDelete|v8::ReadOnly));
+
+      instance->SetAccessor(
+        v8::String::New("replace"),
+        V8Custom::v8LocationReplaceAccessorGetter,
+        0,
+        v8::Handle<v8::Value>(),
+        v8::ALL_CAN_READ,
+        static_cast<v8::PropertyAttribute>(v8::DontDelete|v8::ReadOnly));
+
+      instance->SetAccessor(
+        v8::String::New("assign"),
+        V8Custom::v8LocationAssignAccessorGetter,
+        0,
+        v8::Handle<v8::Value>(),
+        v8::ALL_CAN_READ,
+        static_cast<v8::PropertyAttribute>(v8::DontDelete|v8::ReadOnly));
       break;
     }
     case V8ClassIndex::HISTORY: {
       break;
     }
 
     case V8ClassIndex::MESSAGECHANNEL: {
         // Reserve two more internal fields for referencing the port1
         // and port2 wrappers.  This ensures that the port wrappers are
         // kept alive when the channel wrapper is.
@@ skipping 1724 matching lines @@
     }
     return ToWebCoreString(v8::Debug::Call(frame_source_name));
 }
 
 void V8Proxy::RegisterExtension(v8::Extension* extension) {
     v8::RegisterExtension(extension);
     m_extensions.push_back(extension);
 }
 
 }  // namespace WebCore