Allow huge data: URIs only via WebView.loadDataWithBaseUrl

content/public/common/content_constants.h

Index: content/public/common/content_constants.h
diff --git a/content/public/common/content_constants.h b/content/public/common/content_constants.h
index df9d557ff76de3e5227c3e6ea02e0f72b24310b6..5d05b55809be4db1b63964220c3c20aab2aea202 100644
--- a/content/public/common/content_constants.h
+++ b/content/public/common/content_constants.h
@@ -42,6 +42,13 @@ extern const int kMaxSessionHistoryEntries;
 // to accept in the browser process.
 extern const size_t kMaxTitleChars;
 
+// The maximum number of characters in the URL that we're willing to accept
+// in the browser process. It is set low enough to avoid damage to the browser
+// but high enough that a web site can abuse location.hash for a little storage.
+// We have different values for "max accepted" and "max displayed" because
+// a data: URI may be legitimately massive, but the full URI would kill all
+// known operating systems if you dropped it into a UI control.
+CONTENT_EXPORT extern const size_t kMaxURLChars;
 CONTENT_EXPORT extern const size_t kMaxURLDisplayChars;
 
 extern const char kStatsFilename[];