Named access checks on DOMWindow miss navigator

Named access checks on DOMWindow miss navigator

The design of the named access check is very fragile. Instead of doing the
access check at the same time as the access, we need to check access in a
separate operation using different parameters. Worse, we need to implement a
part of the access check as a blacklist of dangerous properties.

This CL expands the blacklist slightly by adding in the real named properties
from the DOMWindow instance to the current list (which included the real named
properties of the shadow object).

In the longer term, we should investigate whether we can change the V8 API to
let us do the access check in the same callback as the property access itself.

BUG=237022
Committed: https://src.chromium.org/viewvc/blink?view=rev&revision=150616

[abarth-chromium, 2013-05-17 21:44:07]

r?

[abarth-chromium, 2013-05-17 22:07:44]

japhet, would you be willing to take a look at this CL?

[Nate Chapin, 2013-05-17 22:16:24]

LGTM

[commit-bot: I haz the power, 2013-05-17 23:18:48]

CQ is trying da patch. Follow status at
https://chromium-status.appspot.com/cq/abarth@chromium.org/15346002/1

[commit-bot: I haz the power, 2013-05-18 00:40:12]

Change committed as 150616