IE CEEE: Add another layer of isolation to content scripts execution through ...

ceee/ie/plugin/scripting/content_script_manager.cc

 // Copyright (c) 2010 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 //
 // @file
 // Content script manager implementation.
 #include "ceee/ie/plugin/scripting/content_script_manager.h"
 
 #include "ceee/ie/common/ceee_module_util.h"
 #include "ceee/ie/plugin/bho/dom_utils.h"
@@ skipping 156 matching lines @@
   std::wstring extension_id;
   host_->GetExtensionId(&extension_id);
   DCHECK(extension_id.size()) <<
       "Need to revisit async loading of enabled extension list.";
 
   // Execute the bootstrap scripts.
   hr = BootstrapScriptHost(script_host, native_api_, extension_id.c_str());
   if (FAILED(hr))
     return hr;
 
-  // Register the window object and manually make its members global.
+  // Register the window object and initialize the global namespace of the
+  // script host.
   CComPtr<IHTMLWindow2> window;
   hr = document->get_parentWindow(&window);
   if (FAILED(hr))
     return hr;
-  hr = script_host->RegisterScriptObject(L"window", window, false);
+  hr = script_host->RegisterScriptObject(L"unsafeWindow", window, false);
   if (FAILED(hr))
     return hr;
   hr = InvokeNamedFunction(script_host, L"ceee.initGlobals_", NULL, 0);
 
   return hr;
 }
 
 HRESULT ContentScriptManager::BootstrapScriptHost(IScriptHost* script_host,
                                                   IDispatch* native_api,
                                                   const wchar_t* extension_id) {
@@ skipping 188 matching lines @@
     hr = script_host_with_site->SetSite(NULL);
     DCHECK(SUCCEEDED(hr));
   }
 
   // TODO(siggi@chromium.org): Kill off open extension ports.
 
   script_host_.Release();
 
   return hr;
 }