Avoid leaking objects between isolated worlds via attribute event listeners

Source/core/dom/MessagePort.h

 /*
  * Copyright (C) 2008 Apple Inc. All Rights Reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions
  * are met:
  * 1. Redistributions of source code must retain the above copyright
  *    notice, this list of conditions and the following disclaimer.
  * 2. Redistributions in binary form must reproduce the above copyright
  *    notice, this list of conditions and the following disclaimer in the
@@ skipping 64 matching lines @@
     virtual const AtomicString& interfaceName() const OVERRIDE;
     virtual ScriptExecutionContext* scriptExecutionContext() const OVERRIDE;
 
     void dispatchMessages();
 
     using RefCounted<MessagePort>::ref;
     using RefCounted<MessagePort>::deref;
 
     bool hasPendingActivity();
 
-    void setOnmessage(PassRefPtr<EventListener> listener)
+    void setOnmessage(PassRefPtr<EventListener> listener, DOMWrapperWorld* world)
     {
-        setAttributeEventListener(eventNames().messageEvent, listener);
+        setAttributeEventListener(eventNames().messageEvent, listener, world);
         start();
     }
-    EventListener* onmessage() { return getAttributeEventListener(eventNames().messageEvent); }
+    EventListener* onmessage(DOMWrapperWorld* world) { return getAttributeEventListener(eventNames().messageEvent, world); }
 
     // Returns null if there is no entangled port, or if the entangled port is run by a different thread.
     // This is used solely to enable a GC optimization. Some platforms may not be able to determine ownership
     // of the remote port (since it may live cross-process) - those platforms may always return null.
     MessagePort* locallyEntangledPort();
 
     // A port starts out its life entangled, and remains entangled until it is closed or is cloned.
     bool isEntangled() { return !m_closed && !isNeutered(); }
 
     // A port gets neutered when it is transferred to a new owner via postMessage().
@@ skipping 12 matching lines @@
     bool m_started;
     bool m_closed;
 
     ScriptExecutionContext* m_scriptExecutionContext;
     EventTargetData m_eventTargetData;
 };
 
 } // namespace WebCore
 
 #endif // MessagePort_h