Extend the ToRenderFrameHost magic to FrameTreeNode* and Shell*

content/browser/security_exploit_browsertest.cc

 // Copyright (c) 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include <stdint.h>
 
 #include "base/command_line.h"
 #include "base/containers/hash_tables.h"
 #include "base/macros.h"
 #include "base/strings/utf_string_conversions.h"
@@ skipping 54 matching lines @@
 RenderViewHostImpl* PrepareToDuplicateHosts(Shell* shell,
                                             int* target_routing_id) {
   GURL foo("http://foo.com/simple_page.html");
 
   // Start off with initial navigation, so we get the first process allocated.
   NavigateToURL(shell, foo);
   EXPECT_EQ(base::ASCIIToUTF16("OK"), shell->web_contents()->GetTitle());
 
   // Open another window, so we generate some more routing ids.
   ShellAddedObserver shell2_observer;
-  EXPECT_TRUE(ExecuteScript(
-      shell->web_contents(), "window.open(document.URL + '#2');"));
+  EXPECT_TRUE(ExecuteScript(shell, "window.open(document.URL + '#2');"));
   Shell* shell2 = shell2_observer.GetShell();
 
   // The new window must be in the same process, but have a new routing id.
   EXPECT_EQ(shell->web_contents()->GetRenderViewHost()->GetProcess()->GetID(),
             shell2->web_contents()->GetRenderViewHost()->GetProcess()->GetID());
   *target_routing_id =
       shell2->web_contents()->GetRenderViewHost()->GetRoutingID();
   EXPECT_NE(*target_routing_id,
             shell->web_contents()->GetRenderViewHost()->GetRoutingID());
 
@@ skipping 463 matching lines @@
   // separate task of the message loop, so ensure that the process is still
   // considered alive.
   EXPECT_TRUE(root->current_frame_host()->GetProcess()->HasConnection());
 
   exit_observer.Wait();
   EXPECT_FALSE(exit_observer.did_exit_normally());
   ResourceDispatcherHost::Get()->SetDelegate(nullptr);
 }
 
 }  // namespace content