Added characters that look like padlocks to URL unescaping blacklist.

storage/common/fileapi/file_system_util.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "storage/common/fileapi/file_system_util.h"
 
 #include <algorithm>
 
 #include "base/logging.h"
 #include "base/strings/string_util.h"
@@ skipping 164 matching lines @@
       file_system_type = kValidTypes[i].type;
       break;
     }
   }
 
   if (file_system_type == kFileSystemTypeUnknown)
     return false;
 
   std::string path = net::UnescapeURLComponent(url.path(),
       net::UnescapeRule::SPACES | net::UnescapeRule::URL_SPECIAL_CHARS |
-      net::UnescapeRule::CONTROL_CHARS);
+      net::UnescapeRule::SPOOFING_AND_CONTROL_CHARS);
 
   // Ensure the path is relative.
   while (!path.empty() && path[0] == '/')
     path.erase(0, 1);
 
   base::FilePath converted_path = base::FilePath::FromUTF8Unsafe(path);
 
   // All parent references should have been resolved in the renderer.
   if (converted_path.ReferencesParent())
     return false;
@@ skipping 303 matching lines @@
       return base::File::FILE_ERROR_ABORT;
     case net::ERR_ADDRESS_INVALID:
     case net::ERR_INVALID_URL:
       return base::File::FILE_ERROR_INVALID_URL;
     default:
       return base::File::FILE_ERROR_FAILED;
   }
 }
 
 }  // namespace storage