Block webpages from navigating to view-source URLs

content/renderer/render_thread_impl.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "content/renderer/render_thread_impl.h"
 
 #include <algorithm>
 #include <limits>
 #include <map>
 #include <utility>
@@ skipping 1307 matching lines @@
   WebString chrome_scheme(base::ASCIIToUTF16(kChromeUIScheme));
   WebSecurityPolicy::registerURLSchemeAsDisplayIsolated(chrome_scheme);
   WebSecurityPolicy::registerURLSchemeAsNotAllowingJavascriptURLs(
       chrome_scheme);
   WebSecurityPolicy::registerURLSchemeAsSecure(chrome_scheme);
   WebSecurityPolicy::registerURLSchemeAsCORSEnabled(chrome_scheme);
 
   // chrome-devtools:
   WebString devtools_scheme(base::ASCIIToUTF16(kChromeDevToolsScheme));
   WebSecurityPolicy::registerURLSchemeAsDisplayIsolated(devtools_scheme);
+
+  // view-source:
+  WebString view_source_scheme(base::ASCIIToUTF16(kViewSourceScheme));
+  WebSecurityPolicy::registerURLSchemeAsDisplayIsolated(view_source_scheme);

[Charlie Reis, 2016/04/27 21:47:03]

This seems to equate to SecurityOrigin::canDisplay, which has the following
comment:
    // Returns true if |document| can display content from the given URL (e.g.,
    // in an iframe or as an image). For example, web sites generally cannot
    // display content from the user's files system.

Does it also prevent linking or navigating to such content?  I don't see the
code for that.

[meacer, 2016/05/12 01:14:16]

Yes, it also prevents linking and navigation. I think |canDisplay| is a misnomer
and we should probably consider renaming it and updating its documentation.

[Charlie Reis, 2016/05/16 22:22:18]

Ah.  Yes, that would be a good idea.  Do you know which code prevents linking
and navigation for those schemes?  I couldn't find it.  (I can ask dcheng@ if
not.)

 }
 
 void RenderThreadImpl::NotifyTimezoneChange() {
   NotifyTimezoneChangeOnThisThread();
   RenderThread::Get()->PostTaskToAllWebWorkers(
       base::Bind(&NotifyTimezoneChangeOnThisThread));
 }
 
 void RenderThreadImpl::RecordAction(const base::UserMetricsAction& action) {
   Send(new ViewHostMsg_UserMetricsRecordAction(action.str_));
@@ skipping 775 matching lines @@
 }
 
 void RenderThreadImpl::PendingRenderFrameConnect::OnConnectionError() {
   size_t erased =
       RenderThreadImpl::current()->pending_render_frame_connects_.erase(
           routing_id_);
   DCHECK_EQ(1u, erased);
 }
 
 }  // namespace content