Throw exceptions on all failed cross-origin access checks.

LayoutTests/http/tests/security/aboutBlank/xss-DENIED-set-opener-expected.txt

 CONSOLE MESSAGE: Blocked a frame with origin "http://127.0.0.1:8000" from accessing a frame with origin "http://localhost:8000". Protocols, domains, and ports must match.
-CONSOLE MESSAGE: Blocked a frame with origin "http://127.0.0.1:8000" from accessing a frame with origin "http://localhost:8000". Protocols, domains, and ports must match.
-CONSOLE MESSAGE: line 1: Uncaught TypeError: Cannot read property 'body' of undefined
+CONSOLE MESSAGE: line 1: Uncaught SecurityError: Blocked a frame with origin "http://127.0.0.1:8000" from accessing a frame with origin "http://localhost:8000". Protocols, domains, and ports must match.
 This page opens a window to "", injects malicious code, and then uses window.open.call to set its opener to the victim. The opened window then tries to scripts its opener.
 Code injected into window:
 <script>function write(target, message) { target.document.body.innerHTML = message; }
 setTimeout(function() {write(window.opener.top.frames[0], 'FAIL: XSS was allowed.');}, 100);
 setTimeout(function() {write(window.opener.top.frames[1], 'SUCCESS: Window remained in original SecurityOrigin.');}, 200);
 setTimeout(function() { if (window.testRunner) testRunner.globalFlag = true; }, 300);</script>
  
 
 --------
 Frame: '<!--framePath //<!--frame0-->-->'
 --------
 This page doesn't do anything special.
 
 --------
 Frame: '<!--framePath //<!--frame1-->-->'
 --------
 SUCCESS: Window remained in original SecurityOrigin.