Rework security checks to be based on Window rather than Frame.

third_party/WebKit/Source/bindings/core/v8/V8DOMWrapper.cpp

 /*
  * Copyright (C) 2009 Google Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions are
  * met:
  *
  *     * Redistributions of source code must retain the above copyright
  * notice, this list of conditions and the following disclaimer.
  *     * Redistributions in binary form must reproduce the above
@@ skipping 101 matching lines @@
   // context has access to the creation context.
   Frame* frame = toFrameIfNotDetached(contextForWrapper);
   if (!frame) {
     // Sandbox detached frames - they can't create cross origin objects.
     LocalDOMWindow* callingWindow = currentDOMWindow(isolate);
     DOMWindow* targetWindow = toDOMWindow(contextForWrapper);
     // TODO(jochen): Currently, Location is the only object for which we can
     // reach this code path. Should be generalized.
     ExceptionState exceptionState(isolate, ExceptionState::ConstructionContext,
                                   "Location");
-    if (BindingSecurity::shouldAllowAccessToDetachedWindow(
-            callingWindow, targetWindow, exceptionState))
+    if (BindingSecurity::shouldAllowAccessTo(callingWindow, targetWindow,
+                                             exceptionState)) {
       return;
+    }
 
     CHECK_EQ(SecurityError, exceptionState.code());
     return;
   }
   const DOMWrapperWorld& currentWorld = DOMWrapperWorld::world(m_context);
   RELEASE_ASSERT(currentWorld.worldId() ==
                  DOMWrapperWorld::world(contextForWrapper).worldId());
   // TODO(jochen): Add the interface name here once this is generalized.
   ExceptionState exceptionState(isolate, ExceptionState::ConstructionContext,
                                 nullptr);
@@ skipping 12 matching lines @@
   ExceptionState exceptionState(isolate, ExceptionState::ConstructionContext,
                                 "Location");
   LocalDOMWindow* callingWindow = currentDOMWindow(isolate);
   DOMWindow* targetWindow = toDOMWindow(m_context);
   exceptionState.throwSecurityError(
       targetWindow->sanitizedCrossDomainAccessErrorMessage(callingWindow),
       targetWindow->crossDomainAccessErrorMessage(callingWindow));
 }
 
 }  // namespace blink