Add security checks to scheduled actions

third_party/WebKit/Source/core/testing/Internals.cpp

 /*
  * Copyright (C) 2012 Google Inc. All rights reserved.
  * Copyright (C) 2013 Apple Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions
  * are met:
  *
  * 1.  Redistributions of source code must retain the above copyright
  *     notice, this list of conditions and the following disclaimer.
@@ skipping 879 matching lines @@
                                      "No history item is available.");
     return;
   }
   mainItem->clearDocumentState();
   mainItem->setDocumentState(state);
 }
 
 DOMWindow* Internals::pagePopupWindow() const {
   if (!m_document)
     return nullptr;
-  if (Page* page = m_document->page())
-    return page->chromeClient().pagePopupWindowForTesting();
+  if (Page* page = m_document->page()) {
+    LocalDOMWindow* popup =
+        toLocalDOMWindow(page->chromeClient().pagePopupWindowForTesting());
+    if (popup) {
+      // We need to make the popup same origin so layout tests can access it.
+      popup->document()->setSecurityOrigin(m_document->getSecurityOrigin());
+    }
+    return popup;
+  }
   return nullptr;
 }
 
 ClientRect* Internals::absoluteCaretBounds(ExceptionState& exceptionState) {
   if (!frame()) {
     exceptionState.throwDOMException(
         InvalidAccessError, "The document's frame cannot be retrieved.");
     return ClientRect::create();
   }
 
@@ skipping 2235 matching lines @@
 
 void Internals::crash() {
   CHECK(false) << "Intentional crash";
 }
 
 void Internals::setIsLowEndDevice(bool isLowEndDevice) {
   MemoryCoordinator::setIsLowEndDeviceForTesting(isLowEndDevice);
 }
 
 }  // namespace blink