Implement cross-origin attributes using access check interceptors.

third_party/WebKit/Source/core/frame/DOMWindow.h

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef DOMWindow_h
 #define DOMWindow_h
 
 #include "bindings/core/v8/Transferables.h"
 #include "core/CoreExport.h"
 #include "core/events/EventTarget.h"
@@ skipping 84 matching lines @@
   virtual double scrollX() const = 0;
   virtual double scrollY() const = 0;
   double pageXOffset() const { return scrollX(); }
   double pageYOffset() const { return scrollY(); }
 
   virtual DOMVisualViewport* visualViewport() { return nullptr; }
 
   bool closed() const;
 
   // FIXME: This is not listed as a cross-origin accessible attribute, but in
-  // Blink, it's currently marked as DoNotCheckSecurity.
+  // Blink, it's currently marked as IsCrossOrigin.

[dcheng, 2016/11/02 01:46:42]

This comment is actually obsolete; I've removed it locally and will upload it
with my next patchset.

   unsigned length() const;
 
   virtual const AtomicString& name() const = 0;
   virtual void setName(const AtomicString&) = 0;
 
   virtual String status() const = 0;
   virtual void setStatus(const String&) = 0;
   virtual String defaultStatus() const = 0;
   virtual void setDefaultStatus(const String&) = 0;
 
@@ skipping 150 matching lines @@
   // implementation details to scripts.
   bool m_windowIsClosing;
 
  private:
   mutable Member<Location> m_location;
 };
 
 }  // namespace blink
 
 #endif  // DOMWindow_h