Customizer: [31885] actually hasn't fixed the `SecurityError`s. This one does.

props mattwiebe.
fixes #31687.
Built from https://develop.svn.wordpress.org/trunk@31893


git-svn-id: http://core.svn.wordpress.org/trunk@31872 1a063a9b-81f0-0310-95a4-ce76da25c4cd

wp-admin/js/customize-controls.js

@@ -1929,25 +1929,6 @@
 
 			this.query = $.extend( params.query || {}, { customize_messenger_channel: this.channel() });
 
-			// This avoids SecurityErrors when setting a window object in x-origin iframe'd scenarios.
-			this.targetWindow.set = function( to ) {
-				var from = this._value;
-
-				to = this._setter.apply( this, arguments );
-				to = this.validate( to );
-
-				if ( null === to || from === to ) {
-					return this;
-				}
-
-				this._value = to;
-				this._dirty = true;
-
-				this.callbacks.fireWith( this, [ to, from ] );
-
-				return this;
-			};
-
 			this.run( deferred );
 		},
 

wp-includes/js/customize-base.js

@@ -538,11 +538,34 @@ window.wp = window.wp || {};
 
 			this.add( 'channel', params.channel );
 			this.add( 'url', params.url || '' );
-			this.add( 'targetWindow', params.targetWindow || defaultTarget );
 			this.add( 'origin', this.url() ).link( this.url ).setter( function( to ) {
 				return to.replace( /([^:]+:\/\/[^\/]+).*/, '$1' );
 			});
 
+			// first add with no value
+			this.add( 'targetWindow', null );
+			// This avoids SecurityErrors when setting a window object in x-origin iframe'd scenarios.
+			this.targetWindow.set = function( to ) {
+				var from = this._value;
+
+				to = this._setter.apply( this, arguments );
+				to = this.validate( to );
+
+				if ( null === to || from === to ) {
+					return this;
+				}
+
+				this._value = to;
+				this._dirty = true;
+
+				this.callbacks.fireWith( this, [ to, from ] );
+
+				return this;
+			};
+			// now set it
+			this.targetWindow( params.targetWindow || defaultTarget );
+
+
 			// Since we want jQuery to treat the receive function as unique
 			// to this instance, we give the function a new guid.
 			//

wp-includes/version.php

@@ -4,7 +4,7 @@
  *
  * @global string $wp_version
  */
-$wp_version = '4.2-beta2-31892';
+$wp_version = '4.2-beta2-31893';
 
 /**
  * Holds the WordPress DB revision, increments when changes are made to the WordPress DB schema.