Require the entry document to have the same origin as the open()d document

third_party/WebKit/Source/core/dom/Document.h

 /*
  * Copyright (C) 1999 Lars Knoll (knoll@kde.org)
  *           (C) 1999 Antti Koivisto (koivisto@kde.org)
  *           (C) 2001 Dirk Mueller (mueller@kde.org)
  *           (C) 2006 Alexey Proskuryakov (ap@webkit.org)
  * Copyright (C) 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2012 Apple Inc. All rights reserved.
  * Copyright (C) 2008, 2009 Torch Mobile Inc. All rights reserved. (http://www.torchmobile.com/)
  * Copyright (C) 2010 Nokia Corporation and/or its subsidiary(-ies)
  * Copyright (C) 2011 Google Inc. All rights reserved.
  *
@@ skipping 455 matching lines @@
     AXObjectCache* existingAXObjectCache() const;
     AXObjectCache* axObjectCache() const;
     void clearAXObjectCache();
 
     // to get visually ordered hebrew and arabic pages right
     bool visuallyOrdered() const { return m_visuallyOrdered; }
 
     DocumentLoader* loader() const;
 
     // This is the DOM API document.open()
-    void open(Document* ownerDocument, ExceptionState&);
+    void open(Document* enteredDocument, ExceptionState&);

[philipj_slow, 2016/01/29 08:39:18]

Can you document what the enteredDocument is? The further away from bindings we
get the less obvious this probably is. Calling it entryDocument would strengthen
the association with "entry settings object" but instead be inconsistent with
the terminology in bindings.

[jochen (gone - plz use gerrit), 2016/01/29 09:40:24]

added a comment.

     // This is used internally and does not handle exceptions.
     void open();
     PassRefPtrWillBeRawPtr<DocumentParser> implicitOpen(ParserSynchronizationPolicy);
 
     // This is the DOM API document.close()
     void close(ExceptionState&);
     // This is used internally and does not handle exceptions.
     void close();
     // implicitClose() actually does the work of closing the input stream.
     void implicitClose();
 
     bool dispatchBeforeUnloadEvent(ChromeClient&, bool isReload, bool& didAllowNavigation);
     void dispatchUnloadEvents();
 
     enum PageDismissalType {
         NoDismissal = 0,
         BeforeUnloadDismissal = 1,
         PageHideDismissal = 2,
         UnloadDismissal = 3
     };
     PageDismissalType pageDismissalEventBeingDispatched() const;
 
     void cancelParsing();
 
-    void write(const SegmentedString& text, Document* ownerDocument = nullptr, ExceptionState& = ASSERT_NO_EXCEPTION);
-    void write(const String& text, Document* ownerDocument = nullptr, ExceptionState& = ASSERT_NO_EXCEPTION);
-    void writeln(const String& text, Document* ownerDocument = nullptr, ExceptionState& = ASSERT_NO_EXCEPTION);
+    void write(const SegmentedString& text, Document* enteredDocument = nullptr, ExceptionState& = ASSERT_NO_EXCEPTION);
+    void write(const String& text, Document* enteredDocument = nullptr, ExceptionState& = ASSERT_NO_EXCEPTION);
+    void writeln(const String& text, Document* enteredDocument = nullptr, ExceptionState& = ASSERT_NO_EXCEPTION);
     void write(LocalDOMWindow*, const Vector<String>& text, ExceptionState&);
     void writeln(LocalDOMWindow*, const Vector<String>& text, ExceptionState&);
 
     bool wellFormed() const { return m_wellFormed; }
 
     const KURL& url() const { return m_url; }
     void setURL(const KURL&);
 
     // To understand how these concepts relate to one another, please see the
     // comments surrounding their declaration.
@@ skipping 938 matching lines @@
 DEFINE_TYPE_CASTS(TreeScope, Document, document, true, true);
 
 } // namespace blink
 
 #ifndef NDEBUG
 // Outside the WebCore namespace for ease of invocation from gdb.
 CORE_EXPORT void showLiveDocumentInstances();
 #endif
 
 #endif // Document_h