Rework security checks to be based on Window rather than Frame.

third_party/WebKit/Source/bindings/core/v8/BindingSecurity.h

 /*
  * Copyright (C) 2009 Google Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions are
  * met:
  *
  *     * Redistributions of source code must retain the above copyright
  * notice, this list of conditions and the following disclaimer.
  *     * Redistributions in binary form must reproduce the above
@@ skipping 20 matching lines @@
 #ifndef BindingSecurity_h
 #define BindingSecurity_h
 
 #include "core/CoreExport.h"
 #include "platform/wtf/Allocator.h"
 #include "v8/include/v8.h"
 
 namespace blink {
 
 class DOMWindow;
-class EventTarget;
 class ExceptionState;
 class Frame;
 class LocalDOMWindow;
 class Location;
 class Node;
 struct WrapperTypeInfo;
 
 class CORE_EXPORT BindingSecurity {
   STATIC_ONLY(BindingSecurity);
 
  public:
   enum class ErrorReportOption {
     kDoNotReport,
     kReport,
   };
 
   // Check if the caller (|accessingWindow|) is allowed to access the JS
   // receiver object (|target|), where the receiver object is the JS object
   // for which the DOM attribute or DOM operation is being invoked (in the
   // form of receiver.domAttr or receiver.domOp()).
-  // Note that only Window and Location objects are cross-origin accessible
-  // and that EventTarget interface is the parent interface of Window
-  // interface.  So the receiver object must be of type DOMWindow,
-  // EventTarget, or Location.
+  // Note that only Window and Location objects are cross-origin accessible, so
+  // the receiver object must be of type DOMWindow or Location.
   //
   // DOMWindow
   static bool ShouldAllowAccessTo(const LocalDOMWindow* accessing_window,
                                   const DOMWindow* target,
                                   ExceptionState&);
   static bool ShouldAllowAccessTo(const LocalDOMWindow* accessing_window,
                                   const DOMWindow* target,
                                   ErrorReportOption);
-  // EventTarget (as the parent of DOMWindow)
-  static bool ShouldAllowAccessTo(
-      const LocalDOMWindow* accessing_window,
-      const EventTarget* target,
-      ExceptionState&);  // NOLINT(readability/parameter_name)
+
   // Location
   static bool ShouldAllowAccessTo(const LocalDOMWindow* accessing_window,
                                   const Location* target,
                                   ExceptionState&);
   static bool ShouldAllowAccessTo(const LocalDOMWindow* accessing_window,
                                   const Location* target,
                                   ErrorReportOption);
 
   // Check if the caller (|accessingWindow|) is allowed to access the JS
   // returned object (|target|), where the returned object is the JS object
@@ skipping 15 matching lines @@
 
   // These overloads should be used only when checking a general access from
   // one context to another context.  For access to a receiver object or
   // returned object, you should use the above overloads.
   static bool ShouldAllowAccessToFrame(const LocalDOMWindow* accessing_window,
                                        const Frame* target,
                                        ExceptionState&);
   static bool ShouldAllowAccessToFrame(const LocalDOMWindow* accessing_window,
                                        const Frame* target,
                                        ErrorReportOption);
-  // This overload must be used only for detached windows.
-  static bool ShouldAllowAccessToDetachedWindow(
-      const LocalDOMWindow* accessing_window,
-      const DOMWindow* target,
-      ExceptionState&);
 
-  static void FailedAccessCheckFor(v8::Isolate*, const Frame* target);
+  static void FailedAccessCheckFor(v8::Isolate*,
+                                   const WrapperTypeInfo*,
+                                   v8::Local<v8::Object> holder);
 
   // The following two functions were written to be called by
   // V8WrapperInstantiationScope before entering and after exiting an object's
   // creation context during wrapper creation.
 
   // Returns true if the current context has access to creationContext, and
   // throws a SecurityError if it doesn't have access.
   static bool ShouldAllowAccessToCreationContext(
       v8::Local<v8::Context> creation_context,
       const WrapperTypeInfo*);
@@ skipping 17 matching lines @@
   //
   // This function should be only used from V8Window::namedPropertyGetterCustom.
   friend class V8Window;
   static bool ShouldAllowNamedAccessTo(const DOMWindow* accessing_window,
                                        const DOMWindow* target_window);
 };
 
 }  // namespace blink
 
 #endif  // BindingSecurity_h