Rework security checks to be based on Window rather than Frame.

third_party/WebKit/Source/core/html/HTMLFrameElementBase.cpp

 /*
  * Copyright (C) 1999 Lars Knoll (knoll@kde.org)
  *           (C) 1999 Antti Koivisto (koivisto@kde.org)
  *           (C) 2000 Simon Hausmann (hausmann@kde.org)
  *           (C) 2001 Dirk Mueller (mueller@kde.org)
  * Copyright (C) 2004, 2006, 2008, 2009 Apple Inc. All rights reserved.
  *
  * This library is free software; you can redistribute it and/or
  * modify it under the terms of the GNU Library General Public
  * License as published by the Free Software Foundation; either
@@ skipping 49 matching lines @@
   if (contentFrame() && completeURL.protocolIsJavaScript()) {
     // Check if the caller can execute script in the context of the content
     // frame. NB: This check can be invoked without any JS on the stack for some
     // parser operations. In such case, we use the origin of the frame element's
     // containing document as the caller context.
     v8::Isolate* isolate = toIsolate(&document());
     LocalDOMWindow* accessingWindow = isolate->InContext()
                                           ? currentDOMWindow(isolate)
                                           : document().domWindow();
     if (!BindingSecurity::shouldAllowAccessToFrame(
-            accessingWindow, contentFrame(),
+            accessingWindow, *contentFrame(),
             BindingSecurity::ErrorReportOption::Report))
       return false;
   }
   return true;
 }
 
 void HTMLFrameElementBase::openURL(bool replaceCurrentItem) {
   if (!isURLAllowed())
     return;
 
@@ skipping 203 matching lines @@
 
   if (contentDocument()) {
     contentDocument()->willChangeFrameOwnerProperties(
         m_marginWidth, marginHeight, m_scrollingMode);
   }
   m_marginHeight = marginHeight;
   frameOwnerPropertiesChanged();
 }
 
 }  // namespace blink