Ensure that cloned documents inherit the underlying security origin.

This was changed in https://crrev.com/388754 for
DOMImplementation createDocument and should have been done the same
for cloneNode. This brings our implementation in alignment with Firefox.

BUG=605203

Change-Id: I501ae7ea21dc8017e3f21181aed6cf274a71a728
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/1927024
Commit-Queue: Dave Tapuska <dtapuska@chromium.org>
Reviewed-by: Daniel Cheng <dcheng@chromium.org>
Cr-Commit-Position: refs/heads/master@{#718812}

third_party/blink/renderer/core/dom/document.cc

@@ -5103,11 +5103,10 @@ Node* Document::Clone(Document& factory, CloneChildrenFlag flag) const {
 }
 
 Document* Document::CloneDocumentWithoutChildren() const {
-  DocumentInit init =
-      DocumentInit::Create()
-          .WithContextDocument(ContextDocument())
-          .WithURL(Url())
-          .WithOriginToCommit(GetSecurityOrigin()->IsolatedCopy());
+  DocumentInit init = DocumentInit::Create()
+                          .WithContextDocument(ContextDocument())
+                          .WithOwnerDocument(const_cast<Document*>(this))
+                          .WithURL(Url());
   if (IsXMLDocument()) {
     if (IsXHTMLDocument())
       return XMLDocument::CreateXHTML(

third_party/blink/renderer/core/html/html_document.cc

@@ -78,9 +78,9 @@ Document* HTMLDocument::CloneDocumentWithoutChildren() const {
   return MakeGarbageCollected<HTMLDocument>(
       DocumentInit::Create()
           .WithContextDocument(ContextDocument())
+          .WithOwnerDocument(const_cast<HTMLDocument*>(this))
           .WithURL(Url())
-          .WithRegistrationContext(RegistrationContext())
-          .WithOriginToCommit(GetSecurityOrigin()->IsolatedCopy()));
+          .WithRegistrationContext(RegistrationContext()));
 }
 
 // --------------------------------------------------------------------------

third_party/blink/web_tests/http/tests/security/document-clone-node-change-domain.html

@@ -14,20 +14,10 @@
 
                 document.domain = 'example.test';
                 assert_equals(document.domain, 'example.test');
-                assert_equals(doc.domain, 'subdomain.example.test');
+                assert_equals(doc.domain, 'example.test');
 
                 document.domain = 'subdomain.example.test';
-            }, "Cloned documents do not share the underlying domain after the clone.");
-
-            test(function () {
-                assert_equals(document.domain, 'subdomain.example.test');
-
-                document.domain = 'example.test';
-                var doc = document.cloneNode(true);
-
-                assert_equals(document.domain, 'example.test');
-                assert_equals(doc.domain, 'example.test');
-            }, "Cloned documents inherit the underlying domain.");
+            }, "Cloned documents share the underlying domain after the clone.");
         }
     </script>
 </head>