Add the scheme chrome-distiller:// and hook up data source.

chrome/renderer/chrome_content_renderer_client.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/renderer/chrome_content_renderer_client.h"
 
 #include "base/command_line.h"
 #include "base/debug/crash_logging.h"
 #include "base/logging.h"
 #include "base/metrics/histogram.h"
@@ skipping 274 matching lines @@
       command_line->HasSwitch(switches::kRecordMode) ||
       command_line->HasSwitch(switches::kNoJsRandomness)) {
     thread->RegisterExtension(extensions_v8::PlaybackExtension::Get());
   }
 
   // TODO(guohui): needs to forward the new-profile-management switch to
   // renderer processes.
   if (switches::IsNewProfileManagement())
     thread->RegisterExtension(extensions_v8::PrincipalsExtension::Get());
 
-  // chrome:, chrome-search:, and chrome-devtools: pages should not be
-  // accessible by normal content, and should also be unable to script anything
-  // but themselves (to help limit the damage that a corrupt page could cause).
+  // chrome:, chrome-search:, chrome-devtools:, and chrome-distiller: pages
+  // should not be accessible by normal content, and should also be unable to
+  // script anything but themselves (to help limit the damage that a corrupt
+  // page could cause).
   WebString chrome_ui_scheme(ASCIIToUTF16(chrome::kChromeUIScheme));
   WebSecurityPolicy::registerURLSchemeAsDisplayIsolated(chrome_ui_scheme);
 
   WebString chrome_search_scheme(ASCIIToUTF16(chrome::kChromeSearchScheme));
   // The Instant process can only display the content but not read it.  Other
   // processes can't display it or read it.
   if (!command_line->HasSwitch(switches::kInstantProcess))
     WebSecurityPolicy::registerURLSchemeAsDisplayIsolated(chrome_search_scheme);
 
   WebString dev_tools_scheme(ASCIIToUTF16(chrome::kChromeDevToolsScheme));
   WebSecurityPolicy::registerURLSchemeAsDisplayIsolated(dev_tools_scheme);
 
+  if (CommandLine::ForCurrentProcess()->HasSwitch(

[nasko, 2014/01/16 23:39:12]

While this is technically correct, registering the scheme always as a display
isolated is not going to harm security. I doubt it will bring perf hit either,
so might as well do it all the time. This way you don't need to test for it when
the flag is passed.

[nyquist, 2014/01/22 00:47:58]

Done.

+          switches::kEnableDomDistiller)) {
+    WebString dom_distiller_scheme(ASCIIToUTF16(chrome::kDomDistillerScheme));
+    // TODO(nyquist): Add test to ensure this happens when the flag is set.
+    WebSecurityPolicy::registerURLSchemeAsDisplayIsolated(dom_distiller_scheme);
+  }
+
 #if defined(OS_CHROMEOS)
   WebString drive_scheme(ASCIIToUTF16(chrome::kDriveScheme));
   WebSecurityPolicy::registerURLSchemeAsLocal(drive_scheme);
 #endif
 
   // chrome: and chrome-search: pages should not be accessible by bookmarklets
   // or javascript: URLs typed in the omnibox.
   WebSecurityPolicy::registerURLSchemeAsNotAllowingJavascriptURLs(
       chrome_ui_scheme);
   WebSecurityPolicy::registerURLSchemeAsNotAllowingJavascriptURLs(
@@ skipping 1062 matching lines @@
   CommandLine* command_line = CommandLine::ForCurrentProcess();
   return !command_line->HasSwitch(switches::kExtensionProcess);
 }
 
 blink::WebWorkerPermissionClientProxy*
 ChromeContentRendererClient::CreateWorkerPermissionClientProxy(
     content::RenderFrame* render_frame,
     blink::WebFrame* frame) {
   return new WorkerPermissionClientProxy(render_frame, frame);
 }