Don't allow sending data URLs to WebUI, unless in a ChromeOS BalloonHost.

chrome/browser/notifications/balloon_host.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CHROME_BROWSER_NOTIFICATIONS_BALLOON_HOST_H_
 #define CHROME_BROWSER_NOTIFICATIONS_BALLOON_HOST_H_
 #pragma once
 
 #include <string>
 #include <vector>
@@ skipping 32 matching lines @@
   const string16& GetSource() const;
 
   content::WebContents* web_contents() const { return web_contents_.get(); }
 
   // Enable Web UI. This has to be called before renderer is created.
   void EnableWebUI();
 
   // Returns whether the associated render view is ready. Used only for testing.
   bool IsRenderViewReady() const;
 
+  // content::WebContentsDelegate implementation:
+  virtual bool CanLoadDataURLsInWebUI() const OVERRIDE;
+
  protected:
   virtual ~BalloonHost();
 
   scoped_ptr<content::WebContents> web_contents_;
 
  private:
   // content::WebContentsDelegate implementation:
   virtual void CloseContents(content::WebContents* source) OVERRIDE;
   virtual void HandleMouseDown() OVERRIDE;
   virtual void ResizeDueToAutoResize(content::WebContents* source,
@@ skipping 32 matching lines @@
   // Site instance for the balloon/profile, to be used for opening new links.
   scoped_refptr<content::SiteInstance> site_instance_;
 
   // A flag to enable Web UI.
   bool enable_web_ui_;
 
   ExtensionFunctionDispatcher extension_function_dispatcher_;
 };
 
 #endif  // CHROME_BROWSER_NOTIFICATIONS_BALLOON_HOST_H_