diff --git a/complete.html b/complete.html
index e9631130ce9..934de2ec349 100644
--- a/complete.html
+++ b/complete.html
@@ -61900,11 +61900,11 @@ <h3 id=the-window-object><span class=secno>6.2 </span>The <code><a href=#window>
   <pre class=idl>[ReplaceableNamedProperties] <!-- XXX http://www.w3.org/Bugs/Public/show_bug.cgi?id=8241 -->
 interface <dfn id=window>Window</dfn> : <a href=#eventtarget>EventTarget</a> {
   // the current browsing context
-  readonly attribute <a href=#windowproxy>WindowProxy</a> <a href=#dom-window title=dom-window>window</a>;
+  [Unforgeable] readonly attribute <a href=#windowproxy>WindowProxy</a> <a href=#dom-window title=dom-window>window</a>;
   readonly attribute <a href=#windowproxy>WindowProxy</a> <a href=#dom-self title=dom-self>self</a>;
-  readonly attribute <a href=#document>Document</a> <a href=#dom-document title=dom-document>document</a>;
+  [Unforgeable] readonly attribute <a href=#document>Document</a> <a href=#dom-document title=dom-document>document</a>;
            attribute DOMString <a href=#dom-name title=dom-name>name</a>; <!-- not [Replaceable] per WebKit and IE8 -->
-  [PutForwards=<a href=#dom-location-href title=dom-location-href>href</a>] readonly attribute <a href=#location>Location</a> <a href=#dom-location title=dom-location>location</a>;
+  [PutForwards=<a href=#dom-location-href title=dom-location-href>href</a>, Unforgeable] readonly attribute <a href=#location>Location</a> <a href=#dom-location title=dom-location>location</a>;
   readonly attribute <a href=#history-0>History</a> <a href=#dom-history title=dom-history>history</a>;
 <!--FIND-->
   boolean <a href=#dom-find title=dom-find>find</a>(optional DOMString aString, optional boolean aCaseSensitive, optional boolean aBackwards, optional boolean aWrapAround, optional boolean aWholeWord, optional boolean aSearchInFrames, optional boolean aShowDialog);
@@ -61925,7 +61925,7 @@ <h3 id=the-window-object><span class=secno>6.2 </span>The <code><a href=#window>
   // other browsing contexts
   [Replaceable] readonly attribute <a href=#windowproxy>WindowProxy</a> <a href=#dom-frames title=dom-frames>frames</a>;
   [Replaceable] readonly attribute unsigned long <a href=#dom-length title=dom-length>length</a>;
-  readonly attribute <a href=#windowproxy>WindowProxy</a> <a href=#dom-top title=dom-top>top</a>;
+  [Unforgeable] readonly attribute <a href=#windowproxy>WindowProxy</a> <a href=#dom-top title=dom-top>top</a>;
            attribute <a href=#windowproxy>WindowProxy</a> <a href=#dom-opener title=dom-opener>opener</a>;
   readonly attribute <a href=#windowproxy>WindowProxy</a> <a href=#dom-parent title=dom-parent>parent</a>;
   readonly attribute <a href=#element>Element</a>? <a href=#dom-frameelement title=dom-frameElement>frameElement</a>;
diff --git a/index b/index
index 536825edbec..1ca9b618757 100644
--- a/index
+++ b/index
@@ -61767,11 +61767,11 @@ END:VCARD</pre>
   <pre class=idl>[ReplaceableNamedProperties] <!-- XXX http://www.w3.org/Bugs/Public/show_bug.cgi?id=8241 -->
 interface <dfn id=window>Window</dfn> : <a href=#eventtarget>EventTarget</a> {
   // the current browsing context
-  readonly attribute <a href=#windowproxy>WindowProxy</a> <a href=#dom-window title=dom-window>window</a>;
+  [Unforgeable] readonly attribute <a href=#windowproxy>WindowProxy</a> <a href=#dom-window title=dom-window>window</a>;
   readonly attribute <a href=#windowproxy>WindowProxy</a> <a href=#dom-self title=dom-self>self</a>;
-  readonly attribute <a href=#document>Document</a> <a href=#dom-document title=dom-document>document</a>;
+  [Unforgeable] readonly attribute <a href=#document>Document</a> <a href=#dom-document title=dom-document>document</a>;
            attribute DOMString <a href=#dom-name title=dom-name>name</a>; <!-- not [Replaceable] per WebKit and IE8 -->
-  [PutForwards=<a href=#dom-location-href title=dom-location-href>href</a>] readonly attribute <a href=#location>Location</a> <a href=#dom-location title=dom-location>location</a>;
+  [PutForwards=<a href=#dom-location-href title=dom-location-href>href</a>, Unforgeable] readonly attribute <a href=#location>Location</a> <a href=#dom-location title=dom-location>location</a>;
   readonly attribute <a href=#history-0>History</a> <a href=#dom-history title=dom-history>history</a>;
 <!--FIND-->
   boolean <a href=#dom-find title=dom-find>find</a>(optional DOMString aString, optional boolean aCaseSensitive, optional boolean aBackwards, optional boolean aWrapAround, optional boolean aWholeWord, optional boolean aSearchInFrames, optional boolean aShowDialog);
@@ -61792,7 +61792,7 @@ interface <dfn id=window>Window</dfn> : <a href=#eventtarget>EventTarget</a> {
   // other browsing contexts
   [Replaceable] readonly attribute <a href=#windowproxy>WindowProxy</a> <a href=#dom-frames title=dom-frames>frames</a>;
   [Replaceable] readonly attribute unsigned long <a href=#dom-length title=dom-length>length</a>;
-  readonly attribute <a href=#windowproxy>WindowProxy</a> <a href=#dom-top title=dom-top>top</a>;
+  [Unforgeable] readonly attribute <a href=#windowproxy>WindowProxy</a> <a href=#dom-top title=dom-top>top</a>;
            attribute <a href=#windowproxy>WindowProxy</a> <a href=#dom-opener title=dom-opener>opener</a>;
   readonly attribute <a href=#windowproxy>WindowProxy</a> <a href=#dom-parent title=dom-parent>parent</a>;
   readonly attribute <a href=#element>Element</a>? <a href=#dom-frameelement title=dom-frameElement>frameElement</a>;
diff --git a/source b/source
index 0f16fdbe3ee..d930663a8f4 100644
--- a/source
+++ b/source
@@ -70271,11 +70271,11 @@ END:VCARD</pre>
   <pre class="idl">[ReplaceableNamedProperties] <!-- XXX http://www.w3.org/Bugs/Public/show_bug.cgi?id=8241 -->
 interface <dfn>Window</dfn> : <span>EventTarget</span> {
   // the current browsing context
-  readonly attribute <span>WindowProxy</span> <span title="dom-window">window</span>;
+  [Unforgeable] readonly attribute <span>WindowProxy</span> <span title="dom-window">window</span>;
   readonly attribute <span>WindowProxy</span> <span title="dom-self">self</span>;
-  readonly attribute <span>Document</span> <span title="dom-document">document</span>;
+  [Unforgeable] readonly attribute <span>Document</span> <span title="dom-document">document</span>;
            attribute DOMString <span title="dom-name">name</span>; <!-- not [Replaceable] per WebKit and IE8 -->
-  [PutForwards=<span title="dom-location-href">href</span>] readonly attribute <span>Location</span> <span title="dom-location">location</span>;
+  [PutForwards=<span title="dom-location-href">href</span>, Unforgeable] readonly attribute <span>Location</span> <span title="dom-location">location</span>;
   readonly attribute <span>History</span> <span title="dom-history">history</span>;
 <!--END w3c-html--><!--FIND-->
   boolean <span title="dom-find">find</span>(optional DOMString aString, optional boolean aCaseSensitive, optional boolean aBackwards, optional boolean aWrapAround, optional boolean aWholeWord, optional boolean aSearchInFrames, optional boolean aShowDialog);
@@ -70296,7 +70296,7 @@ interface <dfn>Window</dfn> : <span>EventTarget</span> {
   // other browsing contexts
   [Replaceable] readonly attribute <span>WindowProxy</span> <span title="dom-frames">frames</span>;
   [Replaceable] readonly attribute unsigned long <span title="dom-length">length</span>;
-  readonly attribute <span>WindowProxy</span> <span title="dom-top">top</span>;
+  [Unforgeable] readonly attribute <span>WindowProxy</span> <span title="dom-top">top</span>;
            attribute <span>WindowProxy</span> <span title="dom-opener">opener</span>;
   readonly attribute <span>WindowProxy</span> <span title="dom-parent">parent</span>;
   readonly attribute <span>Element</span>? <span title="dom-frameElement">frameElement</span>;