Sandbox should prevent 'execCommand("print", ...)'.

third_party/WebKit/Source/core/page/ChromeClient.cpp

 /*
  * Copyright (C) 2006, 2007, 2009, 2011 Apple Inc. All rights reserved.
  * Copyright (C) 2008, 2010 Nokia Corporation and/or its subsidiary(-ies)
  * Copyright (C) 2012, Samsung Electronics. All rights reserved.
  *
  * This library is free software; you can redistribute it and/or
  * modify it under the terms of the GNU Library General Public
  * License as published by the Free Software Foundation; either
  * version 2 of the License, or (at your option) any later version.
  *
  * This library is distributed in the hope that it will be useful,
  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
  * Library General Public License for more details.
  *
  * You should have received a copy of the GNU Library General Public License
  * along with this library; see the file COPYING.LIB.  If not, write to
  * the Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor,
  * Boston, MA 02110-1301, USA.
  */
 
 #include "core/page/ChromeClient.h"
 
 #include "core/dom/Document.h"
 #include "core/dom/Element.h"
+#include "core/frame/FrameConsole.h"
 #include "core/frame/LocalFrame.h"
+#include "core/inspector/ConsoleMessage.h"
 #include "core/inspector/InspectorInstrumentation.h"
 #include "core/layout/HitTestResult.h"
 #include "core/page/FrameTree.h"
 #include "core/page/ScopedPageLoadDeferrer.h"
 #include "core/page/WindowFeatures.h"
 #include "platform/geometry/IntRect.h"
 #include "platform/network/NetworkHints.h"
 #include "public/platform/WebScreenInfo.h"
 #include <algorithm>
 
@@ skipping 150 matching lines @@
   m_lastToolTipText = toolTip;
   setToolTip(frame, toolTip, toolTipDirection);
 }
 
 void ChromeClient::clearToolTip(LocalFrame& frame) {
   // Do not check m_lastToolTip* and do not update them intentionally.
   // We don't want to show tooltips with same content after clearToolTip().
   setToolTip(frame, String(), LTR);
 }
 
-void ChromeClient::print(LocalFrame* frame) {
+bool ChromeClient::print(LocalFrame* frame) {
+  if (frame->document()->isSandboxed(SandboxModals)) {
+    UseCounter::count(frame, UseCounter::DialogInSandboxedContext);
+    frame->console().addMessage(ConsoleMessage::create(
+        SecurityMessageSource, ErrorMessageLevel,
+        "Ignored call to 'print()'. The document is sandboxed, and the "
+        "'allow-modals' keyword is not set."));
+    return false;
+  }
+
   // Defer loads in case the client method runs a new event loop that would
   // otherwise cause the load to continue while we're in the middle of
   // executing JavaScript.
   ScopedPageLoadDeferrer deferrer;
 
   printDelegate(frame);
+  return true;
 }
 
 }  // namespace blink