Extract a DOMWindow interface from LocalDOMWindow and use it in the idl.

Source/bindings/core/v8/V8Initializer.cpp

 /*
  * Copyright (C) 2009 Google Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions
  * are met:
  * 1. Redistributions of source code must retain the above copyright
  *    notice, this list of conditions and the following disclaimer.
  * 2. Redistributions in binary form must reproduce the above copyright
  *    notice, this list of conditions and the following disclaimer in the
@@ skipping 51 matching lines @@
 namespace blink {
 
 static LocalFrame* findFrame(v8::Local<v8::Object> host, v8::Local<v8::Value> data, v8::Isolate* isolate)
 {
     const WrapperTypeInfo* type = WrapperTypeInfo::unwrap(data);
 
     if (V8Window::wrapperTypeInfo.equals(type)) {
         v8::Handle<v8::Object> windowWrapper = V8Window::findInstanceInPrototypeChain(host, isolate);
         if (windowWrapper.IsEmpty())
             return 0;
-        return V8Window::toImpl(windowWrapper)->frame();
+        DOMWindow* window = V8Window::toImpl(windowWrapper);
+        if (!window->isLocalDOMWindow())
+            return 0;
+        return toLocalDOMWindow(window)->frame();
     }
 
     if (V8History::wrapperTypeInfo.equals(type))
         return V8History::toImpl(host)->frame();
 
     if (V8Location::wrapperTypeInfo.equals(type))
         return V8Location::toImpl(host)->frame();
 
     // This function can handle only those types listed above.
     ASSERT_NOT_REACHED();
@@ skipping 210 matching lines @@
 
     ScriptState* scriptState = ScriptState::from(context);
     promiseRejectMessageQueue().append(PromiseRejectMessage(ScriptValue(scriptState, promise), callStack));
 }
 
 static void failedAccessCheckCallbackInMainThread(v8::Local<v8::Object> host, v8::AccessType type, v8::Local<v8::Value> data)
 {
     v8::Isolate* isolate = v8::Isolate::GetCurrent();
     LocalFrame* target = findFrame(host, data, isolate);
     if (!target)
         return;

[haraken, 2014/11/08 09:17:24]

If the target window is a RemoteDOMWindow, this code returns silently. We might
want to throw a SecurityError, just like the line 311 does.

[dcheng, 2014/11/08 23:59:55]

Done. For now, I had to make the functions to generate error messages virtual
(and we won't be able to generate a sensible error for remote frames until the
security origin replication work I mentioned at BlinkOn 3 is finished). With
security origin replication, I believe we won't need to make this virtual--it
will be sufficient to implement it on the base DOMWindow class.

-    LocalDOMWindow* targetWindow = target->domWindow();
+    LocalDOMWindow* targetWindow = target->localDOMWindow();
 
     // FIXME: We should modify V8 to pass in more contextual information (context, property, and object).
     ExceptionState exceptionState(ExceptionState::UnknownContext, 0, 0, isolate->GetCurrentContext()->Global(), isolate);
     exceptionState.throwSecurityError(targetWindow->sanitizedCrossDomainAccessErrorMessage(callingDOMWindow(isolate)), targetWindow->crossDomainAccessErrorMessage(callingDOMWindow(isolate)));
     exceptionState.throwIfNeeded();
 }
 
 static bool codeGenerationCheckCallbackInMainThread(v8::Local<v8::Context> context)
 {
     if (ExecutionContext* executionContext = toExecutionContext(context)) {
@@ skipping 120 matching lines @@
 
     v8::V8::AddMessageListener(messageHandlerInWorker);
     v8::V8::SetFatalErrorHandler(reportFatalErrorInWorker);
 
     uint32_t here;
     isolate->SetStackLimit(reinterpret_cast<uintptr_t>(&here - kWorkerMaxStackSize / sizeof(uint32_t*)));
     isolate->SetPromiseRejectCallback(promiseRejectHandlerInWorker);
 }
 
 } // namespace blink