Move Frame to the Oilpan heap.

Source/modules/beacon/NavigatorBeacon.cpp

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "config.h"
 #include "modules/beacon/NavigatorBeacon.h"
 
 #include "bindings/core/v8/ExceptionState.h"
 #include "core/dom/ExceptionCode.h"
 #include "core/dom/ExecutionContext.h"
@@ skipping 41 matching lines @@
         return false;
     }
     // FIXME: CSP is not enforced on redirects, crbug.com/372197
     if (!ContentSecurityPolicy::shouldBypassMainWorld(context) && !context->contentSecurityPolicy()->allowConnectToSource(url)) {
         // We can safely expose the URL to JavaScript, as these checks happen synchronously before redirection. JavaScript receives no new information.
         exceptionState.throwSecurityError("Refused to send beacon to '" + url.elidedString() + "' because it violates the document's Content Security Policy.");
         return false;
     }
 
     // Do not allow sending Beacons over a Navigator that is detached.
-    if (!m_navigator.frame())
+    if (!m_navigator.frame() || !m_navigator.frame()->client())
         return false;
 
     return true;
 }
 
 int NavigatorBeacon::maxAllowance() const
 {
     const Settings* settings = m_navigator.frame()->settings();
     if (settings) {
         int maxAllowed = settings->maxBeaconTransmission();
@@ skipping 73 matching lines @@
     KURL url = context->completeURL(urlstring);
     if (!canSendBeacon(context, url, exceptionState))
         return false;
 
     int bytes = 0;
     bool result = BeaconLoader::sendBeacon(m_navigator.frame(), maxAllowance(), url, data, bytes);
     return beaconResult(context, result, bytes);
 }
 
 } // namespace blink