The following revision refers to this bug:
  https://chromium.googlesource.com/chromium/src.git/+/a8b5bd9b7caba19c80f65bd824a1cd9d0c2fecbe

commit a8b5bd9b7caba19c80f65bd824a1cd9d0c2fecbe
Author: mkwst <mkwst@chromium.org>
Date: Tue Apr 05 14:36:19 2016

CREDENTIAL: Block API access from non-top-level Documents.

The APIs ought to throw a SecurityError if executed from non-top-level
Documents. This patch ensures that they do (and SECURITY_CHECKs if they
don't).

BUG= 600689 

Review URL: https://codereview.chromium.org/1861663002

Cr-Commit-Position: refs/heads/master@{#385169}

[add] https://crrev.com/a8b5bd9b7caba19c80f65bd824a1cd9d0c2fecbe/third_party/WebKit/LayoutTests/http/tests/credentialmanager/credentialscontainer-frame-errors.html
[add] https://crrev.com/a8b5bd9b7caba19c80f65bd824a1cd9d0c2fecbe/third_party/WebKit/LayoutTests/http/tests/credentialmanager/resources/iframed-credentialscontainer.html
[modify] https://crrev.com/a8b5bd9b7caba19c80f65bd824a1cd9d0c2fecbe/third_party/WebKit/Source/modules/credentialmanager/CredentialsContainer.cpp