Index: Source/modules/navigatorcontentutils/NavigatorContentUtils.cpp |
diff --git a/Source/modules/navigatorcontentutils/NavigatorContentUtils.cpp b/Source/modules/navigatorcontentutils/NavigatorContentUtils.cpp |
index b0d568cc0be973b8515868f83f1af692543b379e..df33faf653a043e35e7e35c781a7440d448ab64e 100644 |
--- a/Source/modules/navigatorcontentutils/NavigatorContentUtils.cpp |
+++ b/Source/modules/navigatorcontentutils/NavigatorContentUtils.cpp |
@@ -106,7 +106,8 @@ static bool isProtocolWhitelisted(const String& scheme) |
static bool verifyProtocolHandlerScheme(const String& scheme, ExceptionState& es) |
{ |
if (scheme.startsWith("web+")) { |
- if (isValidProtocol(scheme)) |
+ // The specification requires that the length of scheme is at least five characteres (including 'web+' prefix). |
+ if (scheme.length() >= 5 && isValidProtocol(scheme)) |
return true; |
es.throwDOMException(SecurityError); |
return false; |