[Sensors] Allow Sensor API only on secure top-level browsing contexts and add frequency checks

third_party/WebKit/Source/modules/sensor/AmbientLightSensor.idl

Index: third_party/WebKit/Source/modules/sensor/AmbientLightSensor.idl
diff --git a/third_party/WebKit/Source/modules/sensor/AmbientLightSensor.idl b/third_party/WebKit/Source/modules/sensor/AmbientLightSensor.idl
index eb3daf810da018d4d201c8d1cdb53df83b808c23..d494d124f6300a732a2615a1ddfe2c5b9be00e78 100644
--- a/third_party/WebKit/Source/modules/sensor/AmbientLightSensor.idl
+++ b/third_party/WebKit/Source/modules/sensor/AmbientLightSensor.idl
@@ -8,7 +8,8 @@
 [
     RuntimeEnabled=Sensor,
     Constructor(optional SensorOptions sensorOptions),
-    ConstructorCallWith=ExecutionContext,
+    ConstructorCallWith=(ScriptState,ExecutionContext),

[haraken, 2016/09/19 13:07:51]

ConstructorCallWith=ScriptState would be enough. You can get the
ExecutionContext by scriptState->getExecutionContext().

[Mikhail, 2016/09/19 14:18:02]

Done.

+    RaisesException=Constructor,
 ] interface AmbientLightSensor : Sensor {
     readonly attribute AmbientLightSensorReading? reading;
 };