Don't compile functions in a context the caller doesn't have access to

src/d8.cc

 // Copyright 2012 the V8 project authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 
 // Defined when linking against shared lib on Windows.
 #if defined(USING_V8_SHARED) && !defined(V8_SHARED)
 #define V8_SHARED
 #endif
 
@@ skipping 184 matching lines @@
       static_cast<Worker*>(object->GetAlignedPointerFromInternalField(0));
   if (worker == NULL) {
     Throw(isolate, "Worker is defunct because main thread is terminating");
     return NULL;
   }
 
   return worker;
 }
 #endif  // !V8_SHARED
 
+bool AccessCheck(v8::Local<v8::Context> accessing_context,
+                 v8::Local<v8::Object> accessed_object, v8::Local<Value> data) {
+  return !Shell::options.restricted_realms;
+}
 
 }  // namespace
 
 
 class PerIsolateData {
  public:
   explicit PerIsolateData(Isolate* isolate) : isolate_(isolate), realms_(NULL) {
     HandleScope scope(isolate);
     isolate->SetData(0, this);
   }
@@ skipping 1003 matching lines @@
       worker_fun_template);
 #endif  // !V8_SHARED
 
   Local<ObjectTemplate> os_templ = ObjectTemplate::New(isolate);
   AddOSMethods(isolate, os_templ);
   global_template->Set(
       String::NewFromUtf8(isolate, "os", NewStringType::kNormal)
           .ToLocalChecked(),
       os_templ);
 
+  global_template->SetAccessCheckCallback(AccessCheck);
+
   return global_template;
 }
 
 static void EmptyMessageCallback(Local<Message> message, Local<Value> error) {
   // Nothing to be done here, exceptions thrown up to the shell will be reported
   // separately by {Shell::ReportException} after they are caught.
 }
 
 void Shell::Initialize(Isolate* isolate) {
 #ifndef V8_SHARED
@@ skipping 745 matching lines @@
         options.compile_options = v8::ScriptCompiler::kProduceCodeCache;
       } else if (strncmp(value, "=parse", 7) == 0) {
         options.compile_options = v8::ScriptCompiler::kProduceParserCache;
       } else if (strncmp(value, "=none", 6) == 0) {
         options.compile_options = v8::ScriptCompiler::kNoCompileOptions;
       } else {
         printf("Unknown option to --cache.\n");
         return false;
       }
       argv[i] = NULL;
+    } else if (strcmp(argv[i], "--restricted-realms") == 0) {
+      options.restricted_realms = true;
+      argv[i] = nullptr;
     }
   }
 
   v8::V8::SetFlagsFromCommandLine(&argc, argv, true);
 
   // Set up isolated source groups.
   options.isolate_sources = new SourceGroup[options.num_isolates];
   SourceGroup* current = options.isolate_sources;
   current->Begin(argv, 1);
   for (int i = 1; i < argc; i++) {
@@ skipping 544 matching lines @@
 }
 
 }  // namespace v8
 
 
 #ifndef GOOGLE3
 int main(int argc, char* argv[]) {
   return v8::Shell::Main(argc, argv);
 }
 #endif