Use CheckSecurityForNode to filter out insecure calls

lib/html/scripts/htmlrenamer.py

Index: lib/html/scripts/htmlrenamer.py
diff --git a/lib/html/scripts/htmlrenamer.py b/lib/html/scripts/htmlrenamer.py
index ee7892f19e7fe664566c58e3bf150edd7f883c95..7000920f15eeec59744eda2977aeb70510d23fd1 100644
--- a/lib/html/scripts/htmlrenamer.py
+++ b/lib/html/scripts/htmlrenamer.py
@@ -265,8 +265,6 @@ _removed_html_members = set([
     "Node.lookupPrefix",
     "Node.get:PROCESSING_INSTRUCTION_NODE",
     'ShadowRoot.getElementsByTagNameNS',
-    "IFrameElement.get:contentDocument",
-    "LocalWindow.get:frameElement",
     "LocalWindow.get:frames",

[blois, 2012/10/19 21:06:35]

There are a couple of filters for getSVGDocument in here which can probably be
removed as well.

[vsm, 2012/10/19 23:14:16]

Thanks, I think I got everything now.

On 2012/10/19 21:06:35, blois wrote:

     "LocalWindow.get:length",
     "LocalWindow.webkitCancelRequestAnimationFrame",
@@ -286,7 +284,7 @@ class HtmlRenamer(object):
       return html_interface_renames[interface.id]
     return interface.id
 
-  def RenameMember(self, interface_name, member, member_prefix=''):
+  def RenameMember(self, interface_name, member_node, member, member_prefix=''):
     """
     Returns the name of the member in the HTML library or None if the member is
     suppressed in the HTML library
@@ -296,6 +294,9 @@ class HtmlRenamer(object):
     if self._FindMatch(interface, member, member_prefix, _removed_html_members):
       return None
 
+    if 'CheckSecurityForNode' in member_node.ext_attrs:
+      return None
+
     name = self._FindMatch(interface, member, member_prefix,
                            _renamed_html_members)
     target_name = _renamed_html_members[name] if name else member