Reenable framebusting deprecation, change it to allow navigation if iframe has ever had a user gestu

third_party/WebKit/Source/core/input/TouchEventManager.cpp

 // Copyright 2016 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "core/input/TouchEventManager.h"
 
 #include "core/dom/Document.h"
 #include "core/events/TouchEvent.h"
 #include "core/frame/Deprecation.h"
 #include "core/frame/EventHandlerRegistry.h"
@@ skipping 522 matching lines @@
       callback = this;
     }
     if (m_touchSequenceUserGestureToken)
       gestureIndicator = wrapUnique(new UserGestureIndicator(
           m_touchSequenceUserGestureToken.release(), callback));
     else
       gestureIndicator = wrapUnique(
           new UserGestureIndicator(DefinitelyProcessingUserGesture, callback));
     m_touchSequenceUserGestureToken = UserGestureIndicator::currentToken();
   }
+  // TODO(japhet): UserGestureIndicator should setHasReceivedUserGesture()
+  // on the Document.
+  if (UserGestureIndicator::processingUserGesture())
+    m_frame->document()->setHasReceivedUserGesture();

[Rick Byers, 2016/10/06 16:26:47]

I believe this is the wrong document.  Here m_frame is, I believe, always the
local root frame (though there should at least be asserts for that - see
http://crbug.com/449649).  Instead, for touch events, you want
m_touchSequenceDocument.

 
   return dispatchTouchEvents(event, touchInfos, allTouchesReleased);
 }
 
 bool TouchEventManager::isAnyTouchActive() const {
   return m_touchPressed;
 }
 
 void TouchEventManager::userGestureUtilized() {
   // This is invoked for UserGestureIndicators created in
@@ skipping 13 matching lines @@
       feature = UseCounter::TouchEndDuringScrollUserGestureUtilized;
       break;
     default:
       NOTREACHED();
       return;
   }
   Deprecation::countDeprecation(m_frame, feature);
 }
 
 }  // namespace blink