RemoteFrameClient* RemoteFrame::Client() const {
  return static_cast<RemoteFrameClient*>(Frame::Client());
}

The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.