Implement cross-origin attributes using access check interceptors.

third_party/WebKit/LayoutTests/http/tests/security/cross-frame-access-put-expected.txt

Index: third_party/WebKit/LayoutTests/http/tests/security/cross-frame-access-put-expected.txt
diff --git a/third_party/WebKit/LayoutTests/http/tests/security/cross-frame-access-put-expected.txt b/third_party/WebKit/LayoutTests/http/tests/security/cross-frame-access-put-expected.txt
index 25ccdc396d78eb19aeb7a82e90e211ee1dbf11fe..6d2866f6750f39256bcaa087c75259237972af7a 100644
--- a/third_party/WebKit/LayoutTests/http/tests/security/cross-frame-access-put-expected.txt
+++ b/third_party/WebKit/LayoutTests/http/tests/security/cross-frame-access-put-expected.txt
@@ -314,7 +314,7 @@ PASS: Unable to set property onsearch: SecurityError: Blocked a frame with origi
 PASS: Unable to set property onselect: SecurityError: Blocked a frame with origin "http://127.0.0.1:8000" from accessing a cross-origin frame.
 PASS: Unable to set property onsubmit: SecurityError: Blocked a frame with origin "http://127.0.0.1:8000" from accessing a cross-origin frame.
 PASS: Unable to set property onunload: SecurityError: Blocked a frame with origin "http://127.0.0.1:8000" from accessing a cross-origin frame.
-PASS: Unable to set property opener: SecurityError: Failed to set the 'opener' property on 'Window': Blocked a frame with origin "http://127.0.0.1:8000" from accessing a cross-origin frame.

[dcheng, 2016/12/07 08:19:07]

Note: this should be an easy fix in a followup by plumbing the access type /
property information through to failedAccessCheckFor(). I don't want to include
the fix in this patch, since there already so many moving parts. Fixing this
generically in the cross-origin interceptors should make the messages generally
more helpful, not just for opener.

(Another easy fix I could have taken in this patch is pretend that opener is
cross-origin, but that doesn't seem nice either.)

I also tried removing the currently BindingSecurity check in the custom opener
setter, but there are a few things that depend on it, so cleaning up that custom
setter will be part of a followup as well (I added a TODO locally, haven't
uploaded that CL yet)

+PASS: Unable to set property opener: SecurityError: Blocked a frame with origin "http://127.0.0.1:8000" from accessing a cross-origin frame.
 PASS: Unable to set property outerHeight: SecurityError: Blocked a frame with origin "http://127.0.0.1:8000" from accessing a cross-origin frame.
 PASS: Unable to set property outerWidth: SecurityError: Blocked a frame with origin "http://127.0.0.1:8000" from accessing a cross-origin frame.
 PASS: Unable to set property pageXOffset: SecurityError: Blocked a frame with origin "http://127.0.0.1:8000" from accessing a cross-origin frame.