Don't allow sending data URLs to WebUI, unless in a ChromeOS BalloonHost.

content/public/browser/web_ui_controller_factory.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CONTENT_PUBLIC_BROWSER_WEB_UI_CONTROLLER_FACTORY_H_
 #define CONTENT_PUBLIC_BROWSER_WEB_UI_CONTROLLER_FACTORY_H_
 #pragma once
 
 #include "content/common/content_export.h"
 #include "content/public/browser/web_ui.h"
@@ skipping 30 matching lines @@
                               const GURL& url) const = 0;
 
   // Returns true for the subset of WebUIs that actually need WebUI bindings.
   virtual bool UseWebUIBindingsForURL(BrowserContext* browser_context,
                                       const GURL& url) const = 0;
 
   // Returns true if the given URL can be loaded by Web UI system. This allows
   // URLs with WebUI types (as above) and also URLs that can be loaded by
   // normal tabs such as javascript: URLs or about:hang.
   virtual bool IsURLAcceptableForWebUI(BrowserContext* browser_context,
-                                       const GURL& url) const = 0;
+                                       const GURL& url,
+                                       bool data_urls_allowed) const = 0;
 };
 
 }  // namespace content
 
 #endif  // CONTENT_PUBLIC_BROWSER_WEB_UI_CONTROLLER_FACTORY_H_