Don't wait to notify client of spoof attempt if a modal dialog is created.

Source/core/loader/FrameLoader.h

Index: Source/core/loader/FrameLoader.h
diff --git a/Source/core/loader/FrameLoader.h b/Source/core/loader/FrameLoader.h
index 0ac5e38ee8b89edc63e8ae47b0cba006334ddbde..147aa34ed8c323ba5770b80451d4e107073e3597 100644
--- a/Source/core/loader/FrameLoader.h
+++ b/Source/core/loader/FrameLoader.h
@@ -111,8 +111,14 @@ public:
     // FIXME: clear() is trying to do too many things. We should break it down into smaller functions.
     void clear(ClearOptions);
 
+    // Sets a timer to notify the client that the initial empty document has
+    // been accessed, and thus it is no longer safe to show a provisional URL
+    // above the document without risking a URL spoof.
     void didAccessInitialDocument();
     void didAccessInitialDocumentTimerFired(Timer<FrameLoader>*);

[darin (slow to review), 2013/09/03 23:21:45]

I wonder... should this second method really be public?

[Charlie Reis, 2013/09/04 00:01:10]

Nope.  Made it private.

+    // Cancels the timer and immediately notifies the client in cases that
+    // waiting to notify would allow a URL spoof.
+    void forceNotifyForInitialDocumentAccess();
 
     bool isLoading() const;