Fix remote frame origin access in ContentWatcher::NotifyBrowserOfChange.

extensions/renderer/content_watcher.cc

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "extensions/renderer/content_watcher.h"
 
 #include <stddef.h>
 
 #include "content/public/renderer/render_view.h"
 #include "content/public/renderer/render_view_visitor.h"
@@ skipping 79 matching lines @@
   // extension with access to top_origin could run on the frame.
   if (!top_origin.canAccess(changed_frame->document().securityOrigin())) {
     // If the changed frame can't be accessed by the top frame, then
     // no change in it could affect the set of selectors we'd send back.
     return;
   }
 
   std::set<base::StringPiece> transitive_selectors;
   for (blink::WebFrame* frame = top_frame; frame;
        frame = frame->traverseNext(/*wrap=*/false)) {
-    if (top_origin.canAccess(frame->document().securityOrigin())) {
+    if (top_origin.canAccess(frame->securityOrigin())) {
       std::map<blink::WebFrame*, std::set<std::string> >::const_iterator
           frame_selectors = matching_selectors_.find(frame);
       if (frame_selectors != matching_selectors_.end()) {
         transitive_selectors.insert(frame_selectors->second.begin(),
                                     frame_selectors->second.end());
       }
     }
   }
   std::vector<std::string> selector_strings;
   for (std::set<base::StringPiece>::const_iterator it =
            transitive_selectors.begin();
        it != transitive_selectors.end();
        ++it)
     selector_strings.push_back(it->as_string());
   content::RenderView* view =
       content::RenderView::FromWebView(top_frame->view());
   view->Send(new ExtensionHostMsg_OnWatchedPageChange(view->GetRoutingID(),
                                                       selector_strings));
 }
 
 }  // namespace extensions