Bug 855130 - Traverse nsHostObjectProtocolHandler from nsDocument.  r=khuey