postMessage origin should follow lexical scope, but it's currently using the dynamic scope. Patch forthcoming.
Created attachment 30643 [details] patch I even remembered to link to the bug.
Comment on attachment 30643 [details] patch r=me I'm not 100% sure of the v8 part but it looks close enough to me. Also I am surprised that setting document.domain to "0.0.1" works - that's probably a bug.
Fixed in r44124.
<rdar://problem/6921231>
(In reply to comment #3) > Fixed in r44124. <http://trac.webkit.org/changeset/44124> ChangeLog typo fixed: <http://trac.webkit.org/changeset/44125> Follow-up layout test fix: <http://trac.webkit.org/changeset/44133> Follow-up layout test fix #2: <http://trac.webkit.org/changeset/44134>