Custom handlers should throw SecurityError exception if the URL's origin differs from the document's origin.

Secification: http://www.whatwg.org/specs/web-apps/current-work/#custom-handlers
"User agents must throw a SecurityError exception if the resulting absolute URL has an origin that differs from the origin specified by the entry settings object."

BUG=399184, 406236

Review URL: https://codereview.chromium.org/392993005

git-svn-id: svn://svn.chromium.org/blink/trunk@182527 bbb929c8-8fbe-4397-9dbb-9b2b20218538