[demo][hook-callback.js] top from iframe may have unexpected access rights

[t2ym]

[demo][hook-callback.js] top from iframe may have unexpected access rights

Suspected Root Cause

• Some changes for [Chrome 76+] Support HTML Imports polyfill after the native support is removed #275 Support HTML Imports may have race conditions that cause the top global object is accessed with the default acl instead of that for the global object
• Not reproducible for now

Fix

diff --git a/demo/hook-callback.js b/demo/hook-callback.js
index 73657ff..3bdd13e 100644
--- a/demo/hook-callback.js
+++ b/demo/hook-callback.js
@@ -136,7 +136,9 @@ Copyright (c) 2017, 2018, Tetsuya Mori <t2y3141592@gmail.com>. All rights reserv
     else {
       emptyDocumentURL = window.top.emptyDocumentURL;
       otherWindowObjects = window.top.otherWindowObjects;
+      otherWindowObjects.set(Object, window);
       otherWindowObjectsStatus = window.top.otherWindowObjectsStatus;
+      otherWindowObjectsStatus.set = true;
     }
   }
   const _global = typeof window === 'object' ? window : self;