Block navigator.vibrate in cross-domain iframe.

third_party/WebKit/Source/modules/vibration/NavigatorVibration.cpp

 /*
  *  Copyright (C) 2012 Samsung Electronics
  *
  *  This library is free software; you can redistribute it and/or
  *  modify it under the terms of the GNU Library General Public
  *  License as published by the Free Software Foundation; either
  *  version 2 of the License, or (at your option) any later version.
  *
  *  This library is distributed in the hope that it will be useful,
  *  but WITHOUT ANY WARRANTY; without even the implied warranty of
  *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
  *  Library General Public License for more details.
  *
  *  You should have received a copy of the GNU Library General Public License
  *  along with this library; see the file COPYING.LIB.  If not, write to
  *  the Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor,
  *  Boston, MA 02110-1301, USA.
  */
 
 #include "modules/vibration/NavigatorVibration.h"
 
 #include "core/dom/Document.h"
+#include "core/frame/LocalDOMWindow.h"
 #include "core/frame/LocalFrame.h"
 #include "core/frame/Navigator.h"
 #include "core/frame/UseCounter.h"
 #include "core/page/Page.h"
 #include "modules/vibration/VibrationController.h"
 #include "platform/Histogram.h"
 #include "platform/UserGestureIndicator.h"
 
 namespace blink {
 
@@ skipping 41 matching lines @@
     if (!frame)
         return false;
     collectHistogramMetrics(*frame);
 
     DCHECK(frame->document());
     DCHECK(frame->page());
 
     if (!frame->page()->isPageVisible())
         return false;
 
+    if (frame->isCrossOriginSubframe()) {
+        frame->localDOMWindow()->printErrorMessage(
+            "The cross-domain iframe is disallowed to call navigator.vibrate: https://www.chromestatus.com/feature/5682658461876224.");

[Nate Chapin, 2016/09/19 19:33:29]

"A cross-origin iframe may not call navigator.vibrate" is a little shorter and
clearer IMO.

+        return false;
+    }
+
     return NavigatorVibration::from(navigator).controller(*frame)->vibrate(pattern);
 }
 
 // static
 void NavigatorVibration::collectHistogramMetrics(const LocalFrame& frame)
 {
     NavigatorVibrationType type;
     bool userGesture = UserGestureIndicator::processingUserGesture();
     UseCounter::count(&frame, UseCounter::NavigatorVibrate);
     if (!frame.isMainFrame()) {
@@ skipping 36 matching lines @@
 }
 
 DEFINE_TRACE(NavigatorVibration)
 {
     visitor->trace(m_controller);
     Supplement<Navigator>::trace(visitor);
     ContextLifecycleObserver::trace(visitor);
 }
 
 } // namespace blink