Stop blocking 'http://127.0.0.1/' as mixed content.

third_party/WebKit/Source/core/loader/MixedContentCheckerTest.cpp

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "core/loader/MixedContentChecker.h"
 
 #include "core/loader/EmptyClients.h"
 #include "core/testing/DummyPageHolder.h"
 #include "platform/network/ResourceResponse.h"
 #include "platform/weborigin/KURL.h"
 #include "platform/weborigin/SecurityOrigin.h"
 #include "testing/gmock/include/gmock/gmock-generated-function-mockers.h"
 #include "testing/gtest/include/gtest/gtest.h"
 #include "wtf/RefPtr.h"
 #include <base/macros.h>
 
 namespace blink {
 
 TEST(MixedContentCheckerTest, IsMixedContent)
 {
     struct TestCase {
         const char* origin;
         const char* target;
         bool expectation;
     } cases[] = {
         {"http://example.com/foo", "http://example.com/foo", false},
         {"http://example.com/foo", "https://example.com/foo", false},
+        {"http://example.com/foo", "data:text/html,<p>Hi!</p>", false},
         {"https://example.com/foo", "https://example.com/foo", false},
         {"https://example.com/foo", "wss://example.com/foo", false},
+        {"https://example.com/foo", "data:text/html,<p>Hi!</p>", false},
+        {"https://example.com/foo", "http://127.0.0.1/", false},
+        {"https://example.com/foo", "http://localhost/", false},
+
         {"https://example.com/foo", "http://example.com/foo", true},
         {"https://example.com/foo", "http://google.com/foo", true},
         {"https://example.com/foo", "ws://example.com/foo", true},
         {"https://example.com/foo", "ws://google.com/foo", true},
+        {"https://example.com/foo", "http://192.168.1.1/", true},
     };
 
     for (size_t i = 0; i < WTF_ARRAY_LENGTH(cases); ++i) {
         const char* origin = cases[i].origin;
         const char* target = cases[i].target;
         bool expectation = cases[i].expectation;
 
         KURL originUrl(KURL(), origin);
         RefPtr<SecurityOrigin> securityOrigin(SecurityOrigin::create(originUrl));
         KURL targetUrl(KURL(), target);
@@ skipping 58 matching lines @@
     ResourceResponse response2;
     WebURLRequest::RequestContext requestContext = WebURLRequest::RequestContextImage;
     ASSERT_EQ(MixedContentChecker::ContextTypeOptionallyBlockable, MixedContentChecker::contextTypeFromContext(requestContext, &dummyPageHolder->frame()));
     response2.setURL(displayedUrl);
     response2.setSecurityInfo("security info2");
     EXPECT_CALL(*client, didDisplayContentWithCertificateErrors(displayedUrl, response2.getSecurityInfo(), WebURL(mainResourceUrl), CString()));
     MixedContentChecker::handleCertificateError(&dummyPageHolder->frame(), response2, WebURLRequest::FrameTypeNone, requestContext);
 }
 
 } // namespace blink