Rethrow cross-site exceptions as security errors

Source/bindings/core/v8/V8DOMWrapper.cpp

 /*
  * Copyright (C) 2009 Google Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions are
  * met:
  *
  *     * Redistributions of source code must retain the above copyright
  * notice, this list of conditions and the following disclaimer.
  *     * Redistributions in binary form must reproduce the above
@@ skipping 128 matching lines @@
     Frame* frame = toFrameIfNotDetached(contextForWrapper);
     if (!frame)
         return;
     const DOMWrapperWorld& currentWorld = DOMWrapperWorld::world(m_context);
     RELEASE_ASSERT(currentWorld.worldId() == DOMWrapperWorld::world(contextForWrapper).worldId());
     if (currentWorld.isMainWorld()) {
         RELEASE_ASSERT(BindingSecurity::shouldAllowAccessToFrame(isolate, frame, DoNotReportSecurityError));
     }
 }
 
+void V8WrapperInstantiationScope::convertException()
+{
+    v8::Isolate* isolate = m_context->GetIsolate();
+    // FIXME: Currently, Location is the only object for which we can reach this code path. Should be generalized.

[haraken, 2015/09/14 11:56:47]

TODO

+    ExceptionState exceptionState(ExceptionState::ConstructionContext, "Location", isolate->GetCurrentContext()->Global(), isolate);
+    LocalDOMWindow* callingWindow = callingDOMWindow(isolate);
+    DOMWindow* targetWindow = toFrameIfNotDetached(m_context)->domWindow();
+    exceptionState.throwSecurityError(targetWindow->sanitizedCrossDomainAccessErrorMessage(callingWindow), targetWindow->crossDomainAccessErrorMessage(callingWindow));
+    exceptionState.throwIfNeeded();
+}
+
 } // namespace blink