Custom handlers should throw SecurityError exception if the URL's origin differs from the document'…

Source/platform/weborigin/SecurityOrigin.cpp

 /*
  * Copyright (C) 2007 Apple Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions
  * are met:
  *
  * 1.  Redistributions of source code must retain the above copyright
  *     notice, this list of conditions and the following disclaimer.
  * 2.  Redistributions in binary form must reproduce the above copyright
@@ skipping 382 matching lines @@
 
 void SecurityOrigin::grantLoadLocalResources()
 {
     // Granting privileges to some, but not all, documents in a SecurityOrigin
     // is a security hazard because the documents without the privilege can
     // obtain the privilege by injecting script into the documents that have
     // been granted the privilege.
     m_canLoadLocalResources = true;
 }
 
-void SecurityOrigin::grantUniversalAccess()
+void SecurityOrigin::setUniversalAccess(bool allow)
 {
-    m_universalAccess = true;
+    m_universalAccess = allow;
 }
 
 void SecurityOrigin::enforceFilePathSeparation()
 {
     ASSERT(isLocal());
     m_enforceFilePathSeparation = true;
 }
 
 bool SecurityOrigin::isLocal() const
 {
@@ skipping 105 matching lines @@
 }
 
 const String& SecurityOrigin::urlWithUniqueSecurityOrigin()
 {
     ASSERT(isMainThread());
     DEFINE_STATIC_LOCAL(const String, uniqueSecurityOriginURL, ("data:,"));
     return uniqueSecurityOriginURL;
 }
 
 } // namespace blink