Prevent webview tags from navigating outside web-safe schemes.

content/public/browser/render_view_host.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CONTENT_PUBLIC_BROWSER_RENDER_VIEW_HOST_H_
 #define CONTENT_PUBLIC_BROWSER_RENDER_VIEW_HOST_H_
 
 #include "base/values.h"
 #include "content/common/content_export.h"
 #include "content/public/browser/render_widget_host.h"
@@ skipping 48 matching lines @@
   // Returns NULL if the IDs do not correspond to a live RenderViewHost.
   static RenderViewHost* FromID(int render_process_id, int render_view_id);
 
   // Downcasts from a RenderWidgetHost to a RenderViewHost.  Required
   // because RenderWidgetHost is a virtual base class.
   static RenderViewHost* From(RenderWidgetHost* rwh);
 
   // Checks that the given renderer can request |url|, if not it sets it to
   // about:blank.
   // |empty_allowed| must be set to false for navigations for security reasons.
-  static void FilterURL(int renderer_id,
+  static void FilterURL(RenderProcessHost* process,

[Tom Sepez, 2012/10/29 17:59:08]

nit: is this const?

[Charlie Reis, 2012/10/29 18:18:31]

Yep.  Updated.

                         bool empty_allowed,
                         GURL* url);
 
   virtual ~RenderViewHost() {}
 
   // Tell the render view to enable a set of javascript bindings. The argument
   // should be a combination of values from BindingsPolicy.
   virtual void AllowBindings(int binding_flags) = 0;
 
   // Tells the renderer to clear the focused node (if any).
@@ skipping 204 matching lines @@
                                const WebKit::WebFindOptions& options,
                                int* match_count,
                                int* active_ordinal) = 0;
 #endif
 
 };
 
 }  // namespace content
 
 #endif  // CONTENT_PUBLIC_BROWSER_RENDER_VIEW_HOST_H_