Don't set document.domain to an IP address fragment.

Source/weborigin/OriginAccessEntry.h

 /*
  * Copyright (C) 2009 Google Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions are
  * met:
  *
  *     * Redistributions of source code must retain the above copyright
  * notice, this list of conditions and the following disclaimer.
  *     * Redistributions in binary form must reproduce the above
@@ skipping 13 matching lines @@
  * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
  * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
  * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
  * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
  * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
  */
 
 #ifndef OriginAccessEntry_h
 #define OriginAccessEntry_h
 
+#include "weborigin/WebOriginExport.h"
 #include "wtf/text/WTFString.h"
 
 namespace WebCore {
 
 class SecurityOrigin;
 
-class OriginAccessEntry {
+class WEBORIGIN_EXPORT OriginAccessEntry {
 public:
     enum SubdomainSetting {
         AllowSubdomains,
         DisallowSubdomains
     };
 
+    enum IPAddressSetting {
+        TreatIPAddressAsDomain,
+        TreatIPAddressAsIPAddress
+    };
+
     // If host is empty string and SubdomainSetting is AllowSubdomains, the entry will match all domains in the specified protocol.
-    OriginAccessEntry(const String& protocol, const String& host, SubdomainSetting);
+    OriginAccessEntry(const String& protocol, const String& host, SubdomainSetting, IPAddressSetting);
     bool matchesOrigin(const SecurityOrigin&) const;
 
     const String& protocol() const { return m_protocol; }
     const String& host() const { return m_host; }
     SubdomainSetting subdomainSettings() const { return m_subdomainSettings; }
+    IPAddressSetting ipAddressSettings() const { return m_ipAddressSettings; }
 
 private:
     String m_protocol;
     String m_host;
     SubdomainSetting m_subdomainSettings;
+    IPAddressSetting m_ipAddressSettings;
     bool m_hostIsIPAddress;
 };
 
-inline bool operator==(const OriginAccessEntry& a, const OriginAccessEntry& b)
+WEBORIGIN_EXPORT inline bool operator==(const OriginAccessEntry& a, const OriginAccessEntry& b)
 {
-    return equalIgnoringCase(a.protocol(), b.protocol()) && equalIgnoringCase(a.host(), b.host()) && a.subdomainSettings() == b.subdomainSettings();
+    return equalIgnoringCase(a.protocol(), b.protocol())
+        && equalIgnoringCase(a.host(), b.host())
+        && a.subdomainSettings() == b.subdomainSettings()
+        && a.ipAddressSettings() == b.ipAddressSettings();
 }
 
-inline bool operator!=(const OriginAccessEntry& a, const OriginAccessEntry& b)
+WEBORIGIN_EXPORT inline bool operator!=(const OriginAccessEntry& a, const OriginAccessEntry& b)
 {
     return !(a == b);
 }
 
 } // namespace WebCore
 
 #endif // OriginAccessEntry_h