Added characters that look like padlocks to URL unescaping blacklist.

net/base/data_url.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // NOTE: based loosely on mozilla's nsDataChannel.cpp
 
 #include <algorithm>
 
 #include "net/base/data_url.h"
 
@@ skipping 81 matching lines @@
   // spaces now are wrong. People expect to be able to enter them in the URL
   // bar for text, and it can't hurt, so we allow it.)
   std::string temp_data = std::string(comma + 1, end);
 
   // For base64, we may have url-escaped whitespace which is not part
   // of the data, and should be stripped. Otherwise, the escaped whitespace
   // could be part of the payload, so don't strip it.
   if (base64_encoded) {
     temp_data = UnescapeURLComponent(temp_data,
         UnescapeRule::SPACES | UnescapeRule::URL_SPECIAL_CHARS |
-        UnescapeRule::CONTROL_CHARS);
+        UnescapeRule::SPOOFING_AND_CONTROL_CHARS);
   }
 
   // Strip whitespace.
   if (base64_encoded || !(mime_type->compare(0, 5, "text/") == 0 ||
                           mime_type->find("xml") != std::string::npos)) {
     temp_data.erase(std::remove_if(temp_data.begin(), temp_data.end(),
                                    IsAsciiWhitespace<wchar_t>),
                     temp_data.end());
   }
 
   if (!base64_encoded) {
     temp_data = UnescapeURLComponent(temp_data,
         UnescapeRule::SPACES | UnescapeRule::URL_SPECIAL_CHARS |
-        UnescapeRule::CONTROL_CHARS);
+        UnescapeRule::SPOOFING_AND_CONTROL_CHARS);
   }
 
   if (base64_encoded) {
     size_t length = temp_data.length();
     size_t padding_needed = 4 - (length % 4);
     // If the input wasn't padded, then we pad it as necessary until we have a
     // length that is a multiple of 4 as required by our decoder. We don't
     // correct if the input was incorrectly padded. If |padding_needed| == 3,
     // then the input isn't well formed and decoding will fail with or without
     // padding.
     if ((padding_needed == 1 || padding_needed == 2) &&
         temp_data[length - 1] != '=') {
       temp_data.resize(length + padding_needed, '=');
     }
     return base::Base64Decode(temp_data, data);
   }
 
   temp_data.swap(*data);
   return true;
 }
 
 }  // namespace net