| Index: content/browser/renderer_host/render_view_host_impl.cc | 
| =================================================================== | 
| --- content/browser/renderer_host/render_view_host_impl.cc	(revision 259999) | 
| +++ content/browser/renderer_host/render_view_host_impl.cc	(working copy) | 
| @@ -833,6 +833,9 @@ | 
| // and can't be interpreted as a capability. | 
| DropData filtered_data(drop_data); | 
| GetProcess()->FilterURL(true, &filtered_data.url); | 
| +  if (drop_data.did_originate_from_renderer) { | 
| +    filtered_data.filenames.clear(); | 
| +  } | 
|  | 
| // The filenames vector, on the other hand, does represent a capability to | 
| // access the given files. | 
|  |