WebCore:

WebCore:

        Reviewed by Adele.

        Fix for <rdar://problem/5426142>

        Use the EventTarget's frame when creating the EventListener.

        Tests: http/tests/security/listener/xss-JSTargetNode-onclick-addEventListener.html
               http/tests/security/listener/xss-JSTargetNode-onclick-shortcut.html
               http/tests/security/listener/xss-window-onclick-addEventListener.html
               http/tests/security/listener/xss-window-onclick-shortcut.html

        * bindings/js/JSEventTargetNode.cpp:
        (WebCore::JSEventTargetNode::setListener):
        (WebCore::JSEventTargetNodePrototypeFunction::callAsFunction):
        * bindings/js/kjs_window.cpp:
        (KJS::WindowFunc::callAsFunction):

LayoutTests:

        Reviewed by Adele.

        Tests for <rdar://problem/5426142>

        * http/tests/security/listener: Added.
        * http/tests/security/listener/resources: Added.
        * http/tests/security/listener/resources/childWindow.html: Added.
        * http/tests/security/listener/resources/childWithButton.html: Added.
        * http/tests/security/listener/resources/targetChild-JSTargetNode-onclick-addEventListener.html: Added.
        * http/tests/security/listener/resources/targetChild-JSTargetNode-onclick-shortcut.html: Added.
        * http/tests/security/listener/resources/targetChild-window-onclick-addEventListener.html: Added.
        * http/tests/security/listener/resources/targetChild-window-onclick-shortcut.html: Added.
        * http/tests/security/listener/xss-JSTargetNode-onclick-addEventListener-expected.txt: Added.
        * http/tests/security/listener/xss-JSTargetNode-onclick-addEventListener.html: Added.
        * http/tests/security/listener/xss-JSTargetNode-onclick-shortcut-expected.txt: Added.
        * http/tests/security/listener/xss-JSTargetNode-onclick-shortcut.html: Added.
        * http/tests/security/listener/xss-window-onclick-addEventListener-expected.txt: Added.
        * http/tests/security/listener/xss-window-onclick-addEventListener.html: Added.
        * http/tests/security/listener/xss-window-onclick-shortcut-expected.txt: Added.
        * http/tests/security/listener/xss-window-onclick-shortcut.html: Added.

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@25249 268f45cc-cd09-0410-ab3c-d52691b4dbfc