Prevent web content from forging File entries in drag and drop.

Source/core/page/DragController.cpp

 /*
  * Copyright (C) 2007, 2009, 2010 Apple Inc. All rights reserved.
  * Copyright (C) 2008 Google Inc.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions
  * are met:
  * 1. Redistributions of source code must retain the above copyright
  *    notice, this list of conditions and the following disclaimer.
  * 2. Redistributions in binary form must reproduce the above copyright
@@ skipping 247 matching lines @@
         m_documentUnderMouse = nullptr;
         return true;
     }
 
     m_documentUnderMouse = nullptr;
 
     if (operationForLoad(dragData) == DragOperationNone)
         return false;
 
     if (m_page->settings().navigateOnDragDrop())
-        m_page->mainFrame()->loader().load(FrameLoadRequest(0, ResourceRequest(dragData->asURL())));
+        m_page->mainFrame()->loader().load(FrameLoadRequest(0, ResourceRequest(dragData->asURL(DragData::ConvertFilenames))));
     return true;
 }
 
 void DragController::mouseMovedIntoDocument(Document* newDocument)
 {
     if (m_documentUnderMouse == newDocument)
         return;
 
     // If we were over another document clear the selection
     if (m_documentUnderMouse)
@@ skipping 660 matching lines @@
     cleanupAfterSystemDrag();
 }
 
 DragOperation DragController::dragOperation(DragData* dragData)
 {
     // FIXME: To match the MacOS behaviour we should return DragOperationNone
     // if we are a modal window, we are the drag source, or the window is an
     // attached sheet If this can be determined from within WebCore
     // operationForDrag can be pulled into WebCore itself
     ASSERT(dragData);
-    return dragData->containsURL() && !m_didInitiateDrag ? DragOperationCopy : DragOperationNone;
+    return dragData->containsURL(DragData::ConvertFilenames) && !m_didInitiateDrag ? DragOperationCopy : DragOperationNone;
 }
 
 bool DragController::isCopyKeyDown(DragData* dragData)
 {
     int keyState = dragData->modifierKeyState();
 
 #if OS(MACOSX)
     return keyState & PlatformEvent::AltKey;
 #else
     return keyState & PlatformEvent::CtrlKey;
 #endif
 }
 
 void DragController::cleanupAfterSystemDrag()
 {
 }
 
 } // namespace WebCore