Restrict PromiseRejectionEvents to their originating world

Source/bindings/core/v8/V8AbstractEventListener.cpp

Index: Source/bindings/core/v8/V8AbstractEventListener.cpp
diff --git a/Source/bindings/core/v8/V8AbstractEventListener.cpp b/Source/bindings/core/v8/V8AbstractEventListener.cpp
index 2af522d09f82d3615a8b21dc58231fc021dba74d..30799e5f649efbb63aa72ea5450bbb28e03e72b0 100644
--- a/Source/bindings/core/v8/V8AbstractEventListener.cpp
+++ b/Source/bindings/core/v8/V8AbstractEventListener.cpp
@@ -108,6 +108,9 @@ void V8AbstractEventListener::setListenerObject(v8::Local<v8::Object> listener)
 
 void V8AbstractEventListener::invokeEventHandler(ScriptState* scriptState, Event* event, v8::Local<v8::Value> jsEvent)
 {
+    if (!event->canBeDispatchedInWorld(world()))
+        return;
+
     v8::Local<v8::Value> returnValue;
     {
         // Catch exceptions thrown in the event handler so they do not propagate to javascript code that caused the event to fire.