Rework security checks to be based on Window rather than Frame.

third_party/WebKit/Source/web/WebLocalFrameImpl.cpp

 /*
  * Copyright (C) 2009 Google Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions are
  * met:
  *
  *     * Redistributions of source code must retain the above copyright
  * notice, this list of conditions and the following disclaimer.
  *     * Redistributions in binary form must reproduce the above
@@ skipping 816 matching lines @@
 }
 
 v8::Local<v8::Context> WebLocalFrameImpl::mainWorldScriptContext() const {
   ScriptState* scriptState = ScriptState::forMainWorld(frame());
   DCHECK(scriptState);
   return scriptState->context();
 }
 
 bool WebFrame::scriptCanAccess(WebFrame* target) {
   return BindingSecurity::shouldAllowAccessToFrame(
-      currentDOMWindow(mainThreadIsolate()), target->toImplBase()->frame(),
+      currentDOMWindow(mainThreadIsolate()), *target->toImplBase()->frame(),
       BindingSecurity::ErrorReportOption::DoNotReport);
 }
 
 void WebLocalFrameImpl::reload(WebFrameLoadType loadType) {
   // TODO(clamy): Remove this function once RenderFrame calls load for all
   // requests.
   reloadWithOverrideURL(KURL(), loadType);
 }
 
 void WebLocalFrameImpl::reloadWithOverrideURL(const WebURL& overrideUrl,
@@ skipping 1606 matching lines @@
         createMarkup(startPosition, endPosition, AnnotateForInterchange,
                      ConvertBlocksToInlines::NotConvert, ResolveNonLocalURLs);
   } else {
     clipHtml =
         createMarkup(endPosition, startPosition, AnnotateForInterchange,
                      ConvertBlocksToInlines::NotConvert, ResolveNonLocalURLs);
   }
 }
 
 }  // namespace blink