Only do security checks on javascript: URLs for frames for loading

third_party/WebKit/Source/core/html/HTMLIFrameElement.cpp

 /*
  * Copyright (C) 1999 Lars Knoll (knoll@kde.org)
  *           (C) 1999 Antti Koivisto (koivisto@kde.org)
  *           (C) 2000 Simon Hausmann (hausmann@kde.org)
  *           (C) 2001 Dirk Mueller (mueller@kde.org)
  * Copyright (C) 2004, 2006, 2008, 2009 Apple Inc. All rights reserved.
  * Copyright (C) 2009 Ericsson AB. All rights reserved.
  *
  * This library is free software; you can redistribute it and/or
  * modify it under the terms of the GNU Library General Public
@@ skipping 108 matching lines @@
             m_permissions->setValue(value);
     } else {
         if (name == srcAttr)
             logUpdateAttributeIfIsolatedWorldAndInDocument("iframe", srcAttr, oldValue, value);
         HTMLFrameElementBase::parseAttribute(name, oldValue, value);
     }
 }
 
 bool HTMLIFrameElement::layoutObjectIsNeeded(const ComputedStyle& style)
 {
-    return isURLAllowed() && HTMLElement::layoutObjectIsNeeded(style);
+    return isURLAllowed(WillNotLoadURL) && HTMLElement::layoutObjectIsNeeded(style);
 }
 
 LayoutObject* HTMLIFrameElement::createLayoutObject(const ComputedStyle&)
 {
     return new LayoutIFrame(this);
 }
 
 Node::InsertionNotificationRequest HTMLIFrameElement::insertedInto(ContainerNode* insertionPoint)
 {
     InsertionNotificationRequest result = HTMLFrameElementBase::insertedInto(insertionPoint);
@@ skipping 46 matching lines @@
 {
     if (!RuntimeEnabledFeatures::permissionDelegationEnabled())
         return false;
 
     if (!m_permissions)
         m_permissions = HTMLIFrameElementPermissions::create(this);
     return true;
 }
 
 } // namespace blink