Throw 'SecurityError' upon cross-origin Location access.

LayoutTests/http/tests/security/XFrameOptions/x-frame-options-deny-meta-tag-parent-same-origin-deny.html

Index: LayoutTests/http/tests/security/XFrameOptions/x-frame-options-deny-meta-tag-parent-same-origin-deny.html
diff --git a/LayoutTests/http/tests/security/XFrameOptions/x-frame-options-deny-meta-tag-parent-same-origin-deny.html b/LayoutTests/http/tests/security/XFrameOptions/x-frame-options-deny-meta-tag-parent-same-origin-deny.html
index f2c69e4d1fa54e9b95f43b1e41d553e2ecd20eac..d43fa180ddcf058fefc9f54440adf3a0e6618244 100644
--- a/LayoutTests/http/tests/security/XFrameOptions/x-frame-options-deny-meta-tag-parent-same-origin-deny.html
+++ b/LayoutTests/http/tests/security/XFrameOptions/x-frame-options-deny-meta-tag-parent-same-origin-deny.html
@@ -7,12 +7,13 @@
     }
 
     function checkIfDone() {
-        var url = document.querySelector('iframe').contentWindow.location.href;
-
-        if (!url)
-            console.log("PASS: Could not read contentWindow.location.href");
-        else
+        try {
+            var url = document.querySelector('iframe').contentWindow.location.href;
             console.log("FAIL: Could read contentWindow.location.href");
+        } catch (e) {
+            console.log("PASS: Access to contentWindow.location.href threw an exception.");
+        }
+
         testRunner.notifyDone();
     }
 </script>