[demo][acl] Exclude multiple ACLs for global object properties

[t2ym]

[demo][acl] Exclude multiple ACLs for global object properties

Changes

• ACL

  // 'window' in the main document, 'self' in workers
  const mainGlobalObjectName = typeof window === 'object' ? 'window' : 'self';
  const acl = {
    ...
    // ACLs for these global object properties are NOT applied for property access `window.property`
    // They are applied only for property access `window.top`, `window.parent`, ..., `window._global`
    top: 'r--',
    parent: 'r--',
    frames: 'r--',
    global: 'r--',
    self: 'r--',
    _global: 'r--',
    // Main global object ACL, actually window or self
    [mainGlobalObjectName]: { // overwrite self: in worker threads
      ...
    },
  };

• Performance Optimization
  • _globalObjects.get(window) returns a Set object containing only 'window'