Make context initialization order deterministic in WebFrame::swap().

third_party/WebKit/Source/bindings/core/v8/WindowProxyManager.h

 // Copyright 2015 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef WindowProxyManager_h
 #define WindowProxyManager_h
 
 #include <utility>
 
 #include "bindings/core/v8/LocalWindowProxy.h"
@@ skipping 12 matching lines @@
 
 class WindowProxyManagerBase : public GarbageCollected<WindowProxyManagerBase> {
  public:
   DECLARE_TRACE();
 
   v8::Isolate* isolate() const { return m_isolate; }
 
   void clearForClose();
   void CORE_EXPORT clearForNavigation();
 
-  void CORE_EXPORT
-  releaseGlobals(HashMap<DOMWrapperWorld*, v8::Local<v8::Object>>&);
-  void CORE_EXPORT
-  setGlobals(const HashMap<DOMWrapperWorld*, v8::Local<v8::Object>>&);
+  // Globals are passed in a vector to maintain their order: global object for
+  // the main world is always first. This is needed to prevent bugs like
+  // https://crbug.com/700077.
+  using GlobalsVector =
+      Vector<std::pair<DOMWrapperWorld*, v8::Local<v8::Object>>>;
+  void CORE_EXPORT releaseGlobals(GlobalsVector&);
+  void CORE_EXPORT setGlobals(const GlobalsVector&);
 
  protected:
   using IsolatedWorldMap = HeapHashMap<int, Member<WindowProxy>>;
 
   explicit WindowProxyManagerBase(Frame&);
 
   Frame* frame() const { return m_frame; }
   WindowProxy* mainWorldProxy() const { return m_windowProxy.get(); }
   WindowProxy* windowProxy(DOMWrapperWorld&);
 
@@ skipping 52 matching lines @@
   }
 
  private:
   explicit RemoteWindowProxyManager(RemoteFrame& frame)
       : WindowProxyManagerImplHelper<RemoteFrame, RemoteWindowProxy>(frame) {}
 };
 
 }  // namespace blink
 
 #endif  // WindowProxyManager_h