| Index: third_party/WebKit/Source/platform/mhtml/MHTMLArchive.cpp
|
| diff --git a/third_party/WebKit/Source/platform/mhtml/MHTMLArchive.cpp b/third_party/WebKit/Source/platform/mhtml/MHTMLArchive.cpp
|
| index b735d6e72d3f94d24dde674345e261666e9ca871..26fe8ab4d8e1b3b88d67c43482a0c6c3288da1db 100644
|
| --- a/third_party/WebKit/Source/platform/mhtml/MHTMLArchive.cpp
|
| +++ b/third_party/WebKit/Source/platform/mhtml/MHTMLArchive.cpp
|
| @@ -69,8 +69,9 @@ MHTMLArchive::MHTMLArchive()
|
|
|
| MHTMLArchive* MHTMLArchive::create(const KURL& url, PassRefPtr<SharedBuffer> data)
|
| {
|
| - // For security reasons we only load MHTML pages from local URLs.
|
| - if (!SchemeRegistry::shouldTreatURLSchemeAsLocal(url.protocol()))
|
| + // MHTML pages can only be loaded from local URLs and http/https URLs.
|
| + // The latter is now allowed due to full sandboxing enforcement on MHTML pages.
|
| + if (!SchemeRegistry::shouldTreatURLSchemeAsLocal(url.protocol()) && !url.protocolIsInHTTPFamily())
|
| return nullptr;
|
|
|
| MHTMLParser parser(data);
|
|
|