Change URLRequest to return net::ERR_INVALID_URL on redirects to invalid urls.

net/url_request/url_request.cc

 // Copyright (c) 2006-2009 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/url_request/url_request.h"
 
 #include "base/message_loop.h"
 #include "base/process_util.h"
 #include "base/singleton.h"
 #include "base/stats_counters.h"
@@ skipping 384 matching lines @@
   return net::HttpUtil::StripHeaders(
       headers, kPostHeaders, arraysize(kPostHeaders));
 }
 
 int URLRequest::Redirect(const GURL& location, int http_status_code) {
   if (redirect_limit_ <= 0) {
     DLOG(INFO) << "disallowing redirect: exceeds limit";
     return net::ERR_TOO_MANY_REDIRECTS;
   }
 
+  if (!location.is_valid())
+    return net::ERR_INVALID_URL;
+
   if (!job_->IsSafeRedirect(location)) {
     DLOG(INFO) << "disallowing redirect: unsafe protocol";
     return net::ERR_UNSAFE_REDIRECT;
   }
 
   bool strip_post_specific_headers = false;
   if (http_status_code != 307) {
     // NOTE: Even though RFC 2616 says to preserve the request method when
     // following a 302 redirect, normal browsers don't do that.  Instead, they
     // all convert a POST into a GET in response to a 302 and so shall we.  For
@@ skipping 59 matching lines @@
 }
 
 #ifndef NDEBUG
 
 URLRequestMetrics::~URLRequestMetrics() {
   DLOG_IF(WARNING, object_count != 0) <<
     "Leaking " << object_count << " URLRequest object(s)";
 }
 
 #endif