DevTools: Fix tainted Function.prototype methods may disable console.

Source/devtools/scripts/check_injected_script_source.py

 #!/usr/bin/env python
 # Copyright (c) 2014 Google Inc. All rights reserved.
 #
 # Redistribution and use in source and binary forms, with or without
 # modification, are permitted provided that the following conditions are
 # met:
 #
 #     * Redistributions of source code must retain the above copyright
 # notice, this list of conditions and the following disclaimer.
 #     * Redistributions in binary form must reproduce the above
@@ skipping 19 matching lines @@
 import re
 import sys
 import os
 
 
 def validate_injected_script(fileName):
     f = open(fileName, "r")
     lines = f.readlines()
     f.close()
 
-    array_proto_functions = "|".join(["concat", "every", "filter", "forEach", "indexOf", "join", "lastIndexOf", "map", "pop", "push", "reduce", "reduceRight", "reverse", "shift", "slice", "some", "sort", "splice", "toLocaleString", "toString", "unshift"])
+    proto_functions = "|".join([
+        # Array.prototype.*
+        "concat", "every", "filter", "forEach", "indexOf", "join", "lastIndexOf", "map", "pop",
+        "push", "reduce", "reduceRight", "reverse", "shift", "slice", "some", "sort", "splice", "toLocaleString", "toString", "unshift",
+        # Function.prototype.*
+        "apply", "bind", "call", "isGenerator", "toSource",
+    ])
 
     # Black list:
-    # - Function.prototype.bind()
     # - Object.prototype.toString()
     # - Array.prototype.*
+    # - Function.prototype.*
     # - Math.*
-    black_list_call_regex = re.compile(r"\bMath\.\w+\(|\.(bind|toString|" + array_proto_functions + r")\(")
+    black_list_call_regex = re.compile(r"\bMath\.\w+\(|\.(toString|" + proto_functions + r")\(")
 
     errors_found = False
     for i, line in enumerate(lines):
         for match in re.finditer(black_list_call_regex, line):
             errors_found = True
             print "ERROR: Black list function call in %s at line %02d column %02d: %s" % (os.path.basename(fileName), i + 1, match.start(), match.group(0))
 
     if not errors_found:
         print "OK"
 
 
 def main(argv):
     if len(argv) < 2:
         print('ERROR: Usage: %s path/to/InjectedScriptSource.js' % argv[0])
         return 1
 
     validate_injected_script(argv[1])
 
 if __name__ == '__main__':
     sys.exit(main(sys.argv))