Throw 'SecurityError' upon cross-origin Location access.

LayoutTests/http/tests/security/resources/cross-frame-access.js

 function log(s)
 {
     document.getElementById("console").appendChild(document.createTextNode(s + "\n"));
 }
 
 function shouldBe(a, b, shouldNotPrintValues)
 {
     var evalA, evalB;
     try {
         evalA = eval(a);
@@ skipping 40 matching lines @@
 
 function canGet(keyPath)
 {
     try {
         return eval("window." + keyPath) !== undefined;
     } catch(e) {
         return false;
     }
 }
 
+function accessThrowsException(keyPath) {
+    try {
+        eval("window." + keyPath);
+        return false;
+    } catch (e) {
+        return true;
+    }
+}
+
+function deletionThrowsException(keyPath) {
+    try {
+        eval("delete " + keyPath);
+        return false;
+    } catch (e) {
+        return true;
+    }
+}
+
 function canGetDescriptor(target, property)
 {
     try {
         var desc = Object.getOwnPropertyDescriptor(target, property);
         // To deal with an idiosyncrasy in how binding objects work in conjunction with
         // slot and descriptor delegates we also allow descriptor with undefined value/getter/setter
         return  desc !== undefined && (desc.value !== undefined || desc.get !== undefined || desc.set !== undefined);
     } catch(e) {
         return false;
     }
@@ skipping 129 matching lines @@
     function doneHandler() {
         if (win.closed) {
             if (window.testRunner)
                 testRunner.notifyDone();
             return;
         }
 
         setTimeout(doneHandler, 5);
     }
 }