Fix aborted navigates not clearing the pending navigation entry with PlzNavigate.

content/browser/frame_host/navigator.h

Index: content/browser/frame_host/navigator.h
diff --git a/content/browser/frame_host/navigator.h b/content/browser/frame_host/navigator.h
index 1580753ec3ed0ed39d8bb14017c215f9625e6d24..61d9e1374f0675083767dca7281cc63b91e46326 100644
--- a/content/browser/frame_host/navigator.h
+++ b/content/browser/frame_host/navigator.h
@@ -188,6 +188,10 @@ class CONTENT_EXPORT Navigator : public base::RefCounted<Navigator> {
   virtual NavigationHandleImpl* GetNavigationHandleForFrameHost(
       RenderFrameHostImpl* render_frame_host);
 
+  // Called when a navigation has failed or the response is 204/205 to discard
+  // the pending entry in order to avoid url spoofs.
+  virtual void DiscardPendingEntryIfNeeded(NavigationHandleImpl* handle) {}
+
  protected:
   friend class base::RefCounted<Navigator>;
   virtual ~Navigator() {}