Implement cross-origin attributes using access check interceptors.

third_party/WebKit/Source/bindings/core/v8/BindingSecurity.cpp

 /*
  * Copyright (C) 2009 Google Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions are
  * met:
  *
  *     * Redistributions of source code must retain the above copyright
  * notice, this list of conditions and the following disclaimer.
  *     * Redistributions in binary form must reproduce the above
@@ skipping 12 matching lines @@
  * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
  * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
  * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
  * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
  * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
  * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
  */
 
 #include "bindings/core/v8/BindingSecurity.h"
 
+#include "bindings/core/v8/ExceptionState.h"
 #include "bindings/core/v8/V8Binding.h"
 #include "core/dom/Document.h"
 #include "core/frame/LocalDOMWindow.h"
 #include "core/frame/LocalFrame.h"
 #include "core/frame/Location.h"
 #include "core/frame/Settings.h"
 #include "core/html/HTMLFrameElementBase.h"
 #include "core/workers/MainThreadWorkletGlobalScope.h"
 #include "platform/weborigin/SecurityOrigin.h"
 
@@ skipping 172 matching lines @@
   CHECK(target && !target->frame())
       << "This version of shouldAllowAccessToFrame() must be used only for "
       << "detached windows.";
   if (!target->document())
     return false;
   return canAccessFrame(accessingWindow,
                         target->document()->getSecurityOrigin(), target,
                         exceptionState);
 }
 
+void BindingSecurity::failedAccessCheckFor(v8::Isolate* isolate,
+                                           const Frame* target) {
+  // TODO(dcheng): See if this null check can be removed or hoisted to a
+  // different location.
+  if (!target)

[dcheng, 2016/12/07 08:19:08]

This is probably needed, but I'd like to confirm in a followup.

+    return;
+
+  DOMWindow* targetWindow = target->domWindow();
+
+  // FIXME: We should modify V8 to pass in more contextual information (context,
+  // property, and object).
+  ExceptionState exceptionState(ExceptionState::UnknownContext, 0, 0,
+                                isolate->GetCurrentContext()->Global(),
+                                isolate);
+  exceptionState.throwSecurityError(
+      targetWindow->sanitizedCrossDomainAccessErrorMessage(
+          currentDOMWindow(isolate)),
+      targetWindow->crossDomainAccessErrorMessage(currentDOMWindow(isolate)));
+}
+
 }  // namespace blink