Fix aborted navigates not clearing the pending navigation entry with PlzNavigate.

content/browser/frame_host/navigator.h

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CONTENT_BROWSER_FRAME_HOST_NAVIGATOR_H_
 #define CONTENT_BROWSER_FRAME_HOST_NAVIGATOR_H_
 
 #include "base/memory/ref_counted.h"
 #include "base/time/time.h"
 #include "content/browser/frame_host/navigator_delegate.h"
@@ skipping 170 matching lines @@
       const base::TimeTicks& renderer_before_unload_end_time) {}
 
   // Returns the NavigationHandle associated with a navigation in
   // |render_frame_host|. Normally, each frame can have its own
   // NavigationHandle. However, in the case of a navigation to an interstitial
   // page, there's just one NavigationHandle for the whole page (since it's
   // assumed to only have one RenderFrameHost and navigate once).
   virtual NavigationHandleImpl* GetNavigationHandleForFrameHost(
       RenderFrameHostImpl* render_frame_host);
 
+  // Called when a navigation has failed or the response is 204/205 to discard
+  // the pending entry in order to avoid url spoofs.
+  virtual void DiscardPendingEntryIfNeeded(NavigationHandleImpl* handle) {}
+
  protected:
   friend class base::RefCounted<Navigator>;
   virtual ~Navigator() {}
 };
 
 }  // namespace content
 
 #endif  // CONTENT_BROWSER_FRAME_HOST_NAVIGATOR_H_