Restrict PromiseRejectionEvents to their originating world

Source/core/events/PromiseRejectionEvent.cpp

Index: Source/core/events/PromiseRejectionEvent.cpp
diff --git a/Source/core/events/PromiseRejectionEvent.cpp b/Source/core/events/PromiseRejectionEvent.cpp
index a688ca8c088e0902764ae9b39fef9165953f1f70..7947362f7ecfced3394c1b701fd91a981f5c9f01 100644
--- a/Source/core/events/PromiseRejectionEvent.cpp
+++ b/Source/core/events/PromiseRejectionEvent.cpp
@@ -53,6 +53,11 @@ const AtomicString& PromiseRejectionEvent::interfaceName() const
     return EventNames::PromiseRejectionEvent;
 }
 
+bool PromiseRejectionEvent::canBeDispatchedInWorld(const DOMWrapperWorld& world) const
+{
+    return m_scriptState && m_scriptState->contextIsValid() && m_scriptState->world().worldId() == world.worldId();
+}
+
 DEFINE_TRACE(PromiseRejectionEvent)
 {
     Event::trace(visitor);