X87: Only dynamically perform access checks on the receiver if it's a JSGlobalProxy.

X87: Only dynamically perform access checks on the receiver if it's a JSGlobalProxy.

port e9cdcb71743200e7dd18b0be62f764aa53729c63 (r26875)

original commit message:
  Only dynamically perform access checks on the receiver if it's a JSGlobalProxy.
  Proxies up the chain are guaranteed to provide access if we had access to the receiver,
  since otherwise we wouldn't have been able to compile the stub in the first place.
  If the security check would change, the window navigates, changing the map of the JSGlobalProxy.

BUG=
R=weiliang.lin@intel.com

Review URL: https://codereview.chromium.org/964813002

Cr-Commit-Position: refs/heads/master@{#26905}