Let the browser handle external navigations from DevTools.

content/renderer/render_view_impl.cc

Index: content/renderer/render_view_impl.cc
diff --git a/content/renderer/render_view_impl.cc b/content/renderer/render_view_impl.cc
index be1a15187fc06219c61d91c2cdb837cfbed8d3c1..3cb02ac0dd3a0ccef507d164a6a63d780c91f1a5 100644
--- a/content/renderer/render_view_impl.cc
+++ b/content/renderer/render_view_impl.cc
@@ -3043,6 +3043,8 @@ WebNavigationPolicy RenderViewImpl::decidePolicyForNavigation(
     // Similarly, navigations to view-source URLs or within ViewSource mode
     // must be handled by the browser process (except for reloads - those are
     // safe to leave within the renderer).
+    // Also navigations from devtools URLs must be handled by the browser
+    // process.
     // Lastly, access to file:// URLs from non-file:// URL pages must be
     // handled by the browser so that ordinary renderer processes don't get
     // blessed with file permissions.
@@ -3052,7 +3054,8 @@ WebNavigationPolicy RenderViewImpl::decidePolicyForNavigation(
         (cumulative_bindings & BINDINGS_POLICY_WEB_UI) ||
         url.SchemeIs(chrome::kViewSourceScheme) ||
         (frame->isViewSourceModeEnabled() &&
-            type != WebKit::WebNavigationTypeReload);
+            type != WebKit::WebNavigationTypeReload) ||
+        old_url.SchemeIs(chrome::kChromeDevToolsScheme);

[pfeldman, 2013/03/06 14:00:35]

Charlie: can we do
HasWebUIScheme(old_url) instead to cover all such cases? I.e. we imply that any
WebUIScheme URL might have 
BINDINGS_POLICY_WEB_UI. Is check for cumulative_bindings above necessary then?

[Charlie Reis, 2013/03/06 18:18:25]

This seems ok, because it's broader than before.  We will now send navigations
to the browser for WebUI schemes that don't have bindings, in addition to those
that have bindings.  I can't think of cases that will break, and we'll likely
hear about it if it does cause problems.
We definitely cannot remove the cumulative_bindings check, even if we do that. 
This is an important defense in depth that covers cases where bindings were
inadvertently granted.  Please leave it in place.

 
     if (!should_fork && url.SchemeIs(chrome::kFileScheme)) {
       // Fork non-file to file opens.  Check the opener URL if this is the