Add support for gcf:about:plugins in chrome frame full tab mode. The URL vali...

chrome_frame/chrome_frame_delegate.cc

 // Copyright (c) 2009 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome_frame/chrome_frame_delegate.h"
 
+#include "base/utf_string_conversions.h"
+#include "chrome/common/url_constants.h"
+#include "chrome_frame/utils.h"
+
 bool ChromeFrameDelegateImpl::IsTabMessage(const IPC::Message& message,
                                            int* tab_handle) {
   bool is_tab_message = true;
   IPC_BEGIN_MESSAGE_MAP(ChromeFrameDelegateImpl, message)
     IPC_MESSAGE_HANDLER_GENERIC(AutomationMsg_NavigationStateChanged, )
     IPC_MESSAGE_HANDLER_GENERIC(AutomationMsg_UpdateTargetUrl, )
     IPC_MESSAGE_HANDLER_GENERIC(AutomationMsg_HandleAccelerator, )
     IPC_MESSAGE_HANDLER_GENERIC(AutomationMsg_TabbedOut, )
     IPC_MESSAGE_HANDLER_GENERIC(AutomationMsg_OpenURL, )
     IPC_MESSAGE_HANDLER_GENERIC(AutomationMsg_NavigationFailed, )
@@ skipping 51 matching lines @@
     IPC_MESSAGE_HANDLER(AutomationMsg_DownloadRequestInHost,
                         OnDownloadRequestInHost)
     IPC_MESSAGE_HANDLER(AutomationMsg_SetCookieAsync, OnSetCookieAsync)
     IPC_MESSAGE_HANDLER(AutomationMsg_AttachExternalTab, OnAttachExternalTab)
     IPC_MESSAGE_HANDLER(AutomationMsg_RequestGoToHistoryEntryOffset,
         OnGoToHistoryEntryOffset)
     IPC_MESSAGE_HANDLER(AutomationMsg_GetCookiesFromHost, OnGetCookiesFromHost)
     IPC_MESSAGE_HANDLER(AutomationMsg_CloseExternalTab, OnCloseTab)
   IPC_END_MESSAGE_MAP()
 }
+
+
+// NavigationConstraintsImpl method definitions.
+bool NavigationConstraintsImpl::AllowUnsafeUrls() {
+  // No sanity checks if unsafe URLs are allowed
+  return GetConfigBool(false, kAllowUnsafeURLs);
+}
+
+bool NavigationConstraintsImpl::IsSchemeAllowed(const GURL& url) {
+  if (url.is_empty())
+    return false;
+
+  if (!url.is_valid())
+    return false;
+
+  if (url.SchemeIs(chrome::kHttpScheme) ||
+      url.SchemeIs(chrome::kHttpsScheme))
+    return true;
+
+  // Additional checking for view-source. Allow only http and https
+  // URLs in view source.
+  if (url.SchemeIs(chrome::kViewSourceScheme)) {
+    GURL sub_url(url.path());
+    if (sub_url.SchemeIs(chrome::kHttpScheme) ||
+        sub_url.SchemeIs(chrome::kHttpsScheme))
+      return true;
+  }
+
+  // Allow only about:blank or about:version
+  if (url.SchemeIs(chrome::kAboutScheme)) {
+    if (LowerCaseEqualsASCII(url.spec(), chrome::kAboutBlankURL) ||
+        LowerCaseEqualsASCII(url.spec(), chrome::kAboutVersionURL)) {
+      return true;
+    }
+  }
+  return false;
+}
+
+bool NavigationConstraintsImpl::IsZoneAllowed(const GURL& url) {
+  return true;
+}