Support Blob on the V8-based structured clone path.

third_party/WebKit/Source/bindings/core/v8/SerializedScriptValueFactory.cpp

Index: third_party/WebKit/Source/bindings/core/v8/SerializedScriptValueFactory.cpp
diff --git a/third_party/WebKit/Source/bindings/core/v8/SerializedScriptValueFactory.cpp b/third_party/WebKit/Source/bindings/core/v8/SerializedScriptValueFactory.cpp
index d12350edd382fa7c886a7028cba183a7efda9576..63c98341774f6848be5c83ff31af95a3eb47af15 100644
--- a/third_party/WebKit/Source/bindings/core/v8/SerializedScriptValueFactory.cpp
+++ b/third_party/WebKit/Source/bindings/core/v8/SerializedScriptValueFactory.cpp
@@ -23,6 +23,7 @@ PassRefPtr<SerializedScriptValue> SerializedScriptValueFactory::create(v8::Isola
 {
     if (RuntimeEnabledFeatures::v8BasedStructuredCloneEnabled()) {
         V8ScriptValueSerializer serializer(ScriptState::current(isolate));
+        serializer.setBlobInfoArray(blobInfo);
         return serializer.serialize(value, transferables, exceptionState);
     }
     SerializedScriptValueWriter writer;
@@ -35,6 +36,7 @@ v8::Local<v8::Value> SerializedScriptValueFactory::deserialize(SerializedScriptV
     if (RuntimeEnabledFeatures::v8BasedStructuredCloneEnabled()) {
         V8ScriptValueDeserializer deserializer(ScriptState::current(isolate), value);
         deserializer.setTransferredMessagePorts(messagePorts);
+        deserializer.setBlobInfoArray(blobInfo);
         return deserializer.deserialize();
     }
     // deserialize() can run arbitrary script (e.g., setters), which could result in |this| being destroyed.