Block the HTML parser on external stylesheets

third_party/WebKit/Source/core/html/parser/HTMLTreeBuilderSimulator.cpp

 /*
  * Copyright (C) 2013 Google, Inc. All Rights Reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions
  * are met:
  * 1. Redistributions of source code must retain the above copyright
  *    notice, this list of conditions and the following disclaimer.
  * 2. Redistributions in binary form must reproduce the above copyright
  *    notice, this list of conditions and the following disclaimer in the
@@ skipping 134 matching lines @@
             m_namespaceStack.append(HTML);
         if (!inForeignContent()) {
             // FIXME: This is just a copy of Tokenizer::updateStateFor which uses threadSafeMatches.
             if (threadSafeMatch(tagName, textareaTag) || threadSafeMatch(tagName, titleTag)) {
                 tokenizer->setState(HTMLTokenizer::RCDATAState);
             } else if (threadSafeMatch(tagName, plaintextTag)) {
                 tokenizer->setState(HTMLTokenizer::PLAINTEXTState);
             } else if (threadSafeMatch(tagName, scriptTag)) {
                 tokenizer->setState(HTMLTokenizer::ScriptDataState);
                 simulatedToken = ScriptStart;
+            } else if (threadSafeMatch(tagName, linkTag)) {
+                simulatedToken = LinkToken;
             } else if (threadSafeMatch(tagName, styleTag)
                 || threadSafeMatch(tagName, iframeTag)
                 || threadSafeMatch(tagName, xmpTag)
                 || (threadSafeMatch(tagName, noembedTag) && m_options.pluginsEnabled)
                 || threadSafeMatch(tagName, noframesTag)
                 || (threadSafeMatch(tagName, noscriptTag) && m_options.scriptEnabled)) {
                 tokenizer->setState(HTMLTokenizer::RAWTEXTState);
             }
         }
     }
 
     if (token.type() == HTMLToken::EndTag) {
         const String& tagName = token.data();
         if ((m_namespaceStack.last() == SVG && threadSafeMatch(tagName, SVGNames::svgTag))
             || (m_namespaceStack.last() == MathML && threadSafeMatch(tagName, MathMLNames::mathTag))
             || (m_namespaceStack.contains(SVG) && m_namespaceStack.last() == HTML && tokenExitsSVG(token))
             || (m_namespaceStack.contains(MathML) && m_namespaceStack.last() == HTML && tokenExitsMath(token)))
             m_namespaceStack.removeLast();
         if (threadSafeMatch(tagName, scriptTag)) {
             if (!inForeignContent())
                 tokenizer->setState(HTMLTokenizer::DataState);
             return ScriptEnd;
         }
+        if (threadSafeMatch(tagName, styleTag)) {
+            simulatedToken = StyleEnd;
+        }
     }
 
     // FIXME: Also setForceNullCharacterReplacement when in text mode.
     tokenizer->setForceNullCharacterReplacement(inForeignContent());
     tokenizer->setShouldAllowCDATA(inForeignContent());
     return simulatedToken;
 }
 
 } // namespace blink