Allow huge data: URIs only via WebView.loadDataWithBaseUrl

content/browser/frame_host/navigation_entry_impl.h

Index: content/browser/frame_host/navigation_entry_impl.h
diff --git a/content/browser/frame_host/navigation_entry_impl.h b/content/browser/frame_host/navigation_entry_impl.h
index 9a13f654b3ac6d494ce3e6fee79e232e1fab5330..87a05ab2b979fb0dbe672ef2f09492f21534fb37 100644
--- a/content/browser/frame_host/navigation_entry_impl.h
+++ b/content/browser/frame_host/navigation_entry_impl.h
@@ -82,6 +82,8 @@ class CONTENT_EXPORT NavigationEntryImpl
   const GURL& GetURL() const override;
   void SetBaseURLForDataURL(const GURL& url) override;
   const GURL& GetBaseURLForDataURL() const override;
+  void SetDataURLAsString(const std::string& url) override;
+  const std::string& GetDataURLAsString() const override;
   void SetReferrer(const Referrer& referrer) override;
   const Referrer& GetReferrer() const override;
   void SetVirtualURL(const GURL& url) override;
@@ -420,6 +422,10 @@ class CONTENT_EXPORT NavigationEntryImpl
   // persisted by Android WebView.
   GURL base_url_for_data_url_;
 
+  // Used for passing really big data URLs from browser to renderers. Only used
+  // and persisted by Android WebView.

[boliu, 2015/12/09 19:33:02]

<webview> tag also has a LoadDataWithBaseURL

+  std::string data_url_as_string_;
+
   // Whether the entry, while loading, was created for a renderer-initiated
   // navigation.  This dictates whether the URL should be displayed before the
   // navigation commits.  It is cleared in |ResetForCommit| and not persisted.