Do an access check before compiling code via eval()

src/builtins/builtins-function.cc

 // Copyright 2016 the V8 project authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "src/builtins/builtins.h"
 #include "src/builtins/builtins-utils.h"
 
 #include "src/compiler.h"
 #include "src/string-builder.h"
 
 namespace v8 {
 namespace internal {
 
 namespace {
 
-bool AllowDynamicFunction(Isolate* isolate, Handle<JSFunction> target,
-                          Handle<JSObject> target_global_proxy) {
-  if (FLAG_allow_unsafe_function_constructor) return true;
-  HandleScopeImplementer* impl = isolate->handle_scope_implementer();
-  Handle<Context> responsible_context = impl->LastEnteredContext();
-  if (responsible_context.is_null()) {
-    responsible_context = impl->MicrotaskContext();
-    // TODO(jochen): Remove this.
-    if (responsible_context.is_null()) {
-      return true;
-    }
-  }
-  if (*responsible_context == target->context()) return true;
-  return isolate->MayAccess(responsible_context, target_global_proxy);
-}
-
 // ES6 section 19.2.1.1.1 CreateDynamicFunction
 MaybeHandle<Object> CreateDynamicFunction(Isolate* isolate,
                                           BuiltinArguments args,
                                           const char* token) {
   // Compute number of arguments, ignoring the receiver.
   DCHECK_LE(1, args.length());
   int const argc = args.length() - 1;
 
   Handle<JSFunction> target = args.target<JSFunction>();
   Handle<JSObject> target_global_proxy(target->global_proxy(), isolate);
 
-  if (!AllowDynamicFunction(isolate, target, target_global_proxy)) {
+  if (!Builtins::AllowDynamicFunction(isolate, target, target_global_proxy)) {
     isolate->CountUsage(v8::Isolate::kFunctionConstructorReturnedUndefined);
     return isolate->factory()->undefined_value();
   }
 
   // Build the source string.
   Handle<String> source;
   {
     IncrementalStringBuilder builder(isolate);
     builder.AppendCharacter('(');
     builder.AppendCString(token);
@@ skipping 250 matching lines @@
 
   Node* f = assembler->Parameter(0);
   Node* v = assembler->Parameter(1);
   Node* context = assembler->Parameter(4);
   Node* result = assembler->OrdinaryHasInstance(context, f, v);
   assembler->Return(result);
 }
 
 }  // namespace internal
 }  // namespace v8