Avoid accepting suspiciously long URLs from the renderer. These can take down...

chrome/common/chrome_constants.cc

 // Copyright (c) 2006-2008 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/common/chrome_constants.h"
 
 #include "base/file_path.h"
 
 #define FPL FILE_PATH_LITERAL
 
@@ skipping 98 matching lines @@
 const FilePath::CharType kLoginDataFileName[] = FPL("Login Data");
 const FilePath::CharType kJumpListIconDirname[] = FPL("JumpListIcons");
 const FilePath::CharType kWebAppDirname[] = FPL("Web Applications");
 
 // This number used to be limited to 32 in the past (see b/535234).
 const unsigned int kMaxRendererProcessCount = 42;
 const int kStatsMaxThreads = 32;
 const int kStatsMaxCounters = 300;
 
 const size_t kMaxTitleChars = 4 * 1024;
+const size_t kMaxURLChars = 10 * 1024 * 1024;
 
 // We don't enable record mode in the released product because users could
 // potentially be tricked into running a product in record mode without
 // knowing it.  Enable in debug builds.  Playback mode is allowed always,
 // because it is useful for testing and not hazardous by itself.
 #ifndef NDEBUG
 const bool kRecordModeEnabled = true;
 #else
 const bool kRecordModeEnabled = false;
 #endif
 
 }  // namespace chrome
 
 #undef FPL