Check for equality of the URL's origin in replaceState/pushState

third_party/WebKit/LayoutTests/http/tests/navigation/pushstate-whitelisted-at-blob-denied.html

Index: third_party/WebKit/LayoutTests/http/tests/navigation/pushstate-whitelisted-at-blob-denied.html
diff --git a/third_party/WebKit/LayoutTests/http/tests/navigation/pushstate-whitelisted-at-blob-denied.html b/third_party/WebKit/LayoutTests/http/tests/navigation/pushstate-whitelisted-at-blob-denied.html
new file mode 100644
index 0000000000000000000000000000000000000000..48960d8c3283514d44c4ee0ffd3ddda0e79bab24
--- /dev/null
+++ b/third_party/WebKit/LayoutTests/http/tests/navigation/pushstate-whitelisted-at-blob-denied.html
@@ -0,0 +1,22 @@
+<script>
+if (window.testRunner) {
+    testRunner.dumpAsText();
+    testRunner.waitUntilDone();
+    testRunner.addOriginAccessWhitelistEntry(location.origin, location.protocol, '', false);
+}
+
+var blobUrl = URL.createObjectURL(new Blob([
+    "<script>" +
+    "try {" +
+    "    history.pushState(null, null, " + JSON.stringify(document.URL) + ");" +
+    "    document.write('FAIL: pushState from blob:-URL succeeded.');" +
+    "} catch(e) {" +
+    "    document.write('PASS: pushState from blob:-URL was blocked.');" +
+    "}" +
+    "if (window.testRunner)" +
+    "    testRunner.notifyDone();" +
+    "<\/script>"
+], {type:"text/html"}));
+
+location.href = blobUrl;
+</script>