Rework security checks to be based on Window rather than Frame.

third_party/WebKit/Source/bindings/core/v8/V8ScriptRunner.cpp

 /*
  * Copyright (C) 2009 Google Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions
  * are met:
  * 1. Redistributions of source code must retain the above copyright
  *    notice, this list of conditions and the following disclaimer.
  * 2. Redistributions in binary form must reproduce the above copyright
  *    notice, this list of conditions and the following disclaimer in the
@@ skipping 637 matching lines @@
     throwScriptForbiddenException(isolate);
     return v8::MaybeLocal<v8::Value>();
   }
   if (!depth)
     TRACE_EVENT_BEGIN1("devtools.timeline", "FunctionCall", "data",
                        InspectorFunctionCallEvent::data(context, function));
 
   DCHECK(!frame ||
          BindingSecurity::shouldAllowAccessToFrame(
              toDOMWindow(function->CreationContext())->toLocalDOMWindow(),
-             frame, BindingSecurity::ErrorReportOption::DoNotReport));
+             *frame, BindingSecurity::ErrorReportOption::DoNotReport));
   CHECK(!ThreadState::current()->isWrapperTracingForbidden());
   v8::MicrotasksScope microtasksScope(isolate,
                                       v8::MicrotasksScope::kRunMicrotasks);
   probe::willCallFunction(context);
   ThreadDebugger::willExecuteScript(isolate, function->ScriptId());
   v8::MaybeLocal<v8::Value> result =
       function->Call(isolate->GetCurrentContext(), receiver, argc, args);
   CHECK(!isolate->IsDead());
   ThreadDebugger::didExecuteScript(isolate);
   probe::didCallFunction(context, function);
@@ skipping 66 matching lines @@
           v8AtomicString(isolate, "((e) => { throw e; })"), origin)
           .ToLocalChecked();
   v8::Local<v8::Function> thrower = runCompiledInternalScript(isolate, script)
                                         .ToLocalChecked()
                                         .As<v8::Function>();
   v8::Local<v8::Value> args[] = {exception};
   callInternalFunction(thrower, thrower, WTF_ARRAY_LENGTH(args), args, isolate);
 }
 
 }  // namespace blink