Allow outer context to access arbitrary URLs

To grant universal access to a web page
attribute "WebSecurityEnabled" must be applied during the initializing
security context for Document instance. Setting up it later will not cause any effect
See <qt\src\3rdparty\webkit\Source\WebCore\dom\Document.cpp:4468>

Issue: https://github.com/ariya/phantomjs/issues/11217