Proposed fix for Object.observe access checks

Proposed fix for Object.observe access checks

BUG=367817

[dcarney, 2014-04-29 06:28:03]

looks ok, but we want to have all the cross-origin checks go through a
chokepoint, like MayAccessPreCheck (by having the relevant bit moved to another
function with a better name)

[adamk, 2014-04-29 15:31:27]

On 2014/04/29 06:28:03, dcarney wrote:
> looks ok, but we want to have all the cross-origin checks go through a
> chokepoint, like MayAccessPreCheck (by having the relevant bit moved to
another
> function with a better name)

Indeed, thanks for taking a look. I should have said "proof of concept" fix,
this isn't actually the patch I'd want to land, it was just the minimal set of
code changes necessary to avoid the posted exploits.

There are also some loose ends that need to be tied up around
Object.getNotifier() that I need to tie up in the same patch.