binding: Moves the check for the first access to the initial document into BindingSecurity.

third_party/WebKit/Source/bindings/core/v8/BindingSecurity.h

 /*
  * Copyright (C) 2009 Google Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions are
  * met:
  *
  *     * Redistributions of source code must retain the above copyright
  * notice, this list of conditions and the following disclaimer.
  *     * Redistributions in binary form must reproduce the above
@@ skipping 34 matching lines @@
 class LocalDOMWindow;
 class Location;
 class MainThreadWorkletGlobalScope;
 class Node;
 
 enum SecurityReportingOption {
     DoNotReportSecurityError,
     ReportSecurityError,
 };
 
+// TODO(yukishiino): Remove the first argument of v8::Isolate*.  These functions
+// just check if it's accessible or not, and never create anything.  So there is
+// no need to pass the isolate.
 class CORE_EXPORT BindingSecurity {
     STATIC_ONLY(BindingSecurity);
 public:
     // Check if the caller (|accessingWindow|) is allowed to access the JS
     // receiver object (|target|), where the receiver object is the JS object
     // for which the DOM attribute or DOM operation is being invoked (in the
     // form of receiver.domAttr or receiver.domOp()).
     // Note that only Window and Location objects are cross-origin accessible
     // and that EventTarget interface is the parent interface of Window
     // interface.  So the receiver object must be of type DOMWindow,
@@ skipping 26 matching lines @@
     // it's not null.
     //
     // Node
     static bool shouldAllowAccessTo(v8::Isolate*, const LocalDOMWindow* accessingWindow, const Node* target, ExceptionState&);
     static bool shouldAllowAccessTo(v8::Isolate*, const LocalDOMWindow* accessingWindow, const Node* target, SecurityReportingOption);
 };
 
 } // namespace blink
 
 #endif