If an iframe loads a webgl context we need to make sure that we query for the load policy of the top document's url, not the iframe's.
Created attachment 222723 [details]
Comment on attachment 222723 [details]
View in context: https://bugs.webkit.org/attachment.cgi?id=222723&action=review
> - Page* page = document().page();
I asked if this was right because it means that trusting the main document's domain would let subdocuments from origins the user doesn't trust run, and he noted that plugins do the same thing, so I think this is fine (but maybe we should revisit this?).
until someone yells at me.