Rework security checks to be based on Window rather than Frame.

third_party/WebKit/LayoutTests/fast/dom/Window/resources/window-property-collector.js

 function collectProperties(object, windowHasBeenGCed)
 {
     collectPropertiesHelper(object, object, windowHasBeenGCed, []);
 
     propertiesToVerify.sort(function (a, b)
     {
         if (a.property < b.property)
             return -1
         if (a.property > b.property)
             return 1;
         return 0;
     });
 }
 
 function emitExpectedResult(path, expected)
 {
     // Skip internals properties, since they aren't web accessible.
     if (path[0] == 'internals'
         || path[0] == 'clientInformation' // Just an alias for navigator.
         || path[0] == 'testRunner' // Skip testRunner since they are only for testing.
         || path[0] == 'layoutTestController' // Just an alias for testRunner.
         || path[0] == 'eventSender') { // Skip eventSender since they are only for testing.
         return;
     }
 
     // Skip the properties which are hard to expect a stable result.
     if (path[0] == 'accessibilityController' // we can hardly estimate the states of the cached WebAXObjects.
-        || path[0] == 'localStorage') { // local storage is not reliably cleared between tests.
+        // TODO(https://crbug.com/698610): Web storage APIs are not being
+        // cleared between tests.
+        || path[0] == 'localStorage'
+        || path[0] == 'sessionStorage') {
         return;
     }
 
     // FIXME: Skip MemoryInfo for now, since it's not implemented as a DOMWindowProperty, and has
     // no way of knowing when it's detached. Eventually this should have the same behavior.
     if (path.length >= 2 && (path[0] == 'console' || path[0] == 'performance') && path[1] == 'memory')
         return;
 
     // Skip things that are assumed to be constants.
     if (path[path.length - 1].toUpperCase() == path[path.length - 1])
@@ skipping 89 matching lines @@
 }
 
 function pathExists(object, path) {
     for (var i = 0; i < path.length; i++) {
         if (!object || !(path[i] in object))
             return false;
         object = object[path[i]];
     }
     return true;
 }