Block webpages from navigating to view-source URLs

content/browser/browser_side_navigation_browsertest.cc

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include <stdint.h>
 
 #include "base/command_line.h"
 #include "base/strings/stringprintf.h"
 #include "base/strings/utf_string_conversions.h"
 #include "content/browser/web_contents/web_contents_impl.h"
 #include "content/common/site_isolation_policy.h"
 #include "content/public/browser/web_contents.h"
 #include "content/public/common/content_switches.h"
+#include "content/public/common/url_constants.h"
 #include "content/public/test/browser_test_utils.h"
 #include "content/public/test/content_browser_test.h"
 #include "content/public/test/content_browser_test_utils.h"
 #include "content/public/test/test_navigation_observer.h"
 #include "content/shell/browser/shell.h"
 #include "net/dns/mock_host_resolver.h"
 #include "net/test/embedded_test_server/embedded_test_server.h"
 #include "net/test/url_request/url_request_failed_job.h"
 #include "url/gurl.h"
 
@@ skipping 197 matching lines @@
   EXPECT_EQ("text=&select=a",
             base::UTF16ToASCII(shell()->web_contents()->GetTitle()));
   EXPECT_EQ(post_url, shell()->web_contents()->GetLastCommittedURL());
   EXPECT_TRUE(shell()
                   ->web_contents()
                   ->GetController()
                   .GetActiveEntry()
                   ->GetHasPostData());
 }
 
+// Ensure that browser side navigation handles view-source URLs correctly.
+IN_PROC_BROWSER_TEST_F(BrowserSideNavigationBrowserTest, ViewSourceNavigation) {
+  TestNavigationObserver observer(shell()->web_contents());
+  GURL url(embedded_test_server()->GetURL("/title1.html"));
+  GURL view_source_url(content::kViewSourceScheme + std::string(":") +
+                       url.spec());
+  NavigateToURL(shell(), view_source_url);
+  EXPECT_EQ(url, observer.last_navigation_url());
+  EXPECT_TRUE(observer.last_navigation_succeeded());
+}

[Charlie Reis, 2016/05/24 22:54:16]

Thanks for proactively testing the PlzNavigate case!  Can you add a
renderer-initiated test that shows it stays blocked?  See
RendererInitiatedCrossSiteNavigation for a model.

[meacer, 2016/05/31 23:57:54]

Done.

+
 }  // namespace content