Add check for file:-navigations from PDFs

chrome/browser/resources/pdf/navigator.js

 // Copyright 2015 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 'use strict';
 
 /**
  * Creates a new NavigatorDelegate for calling browser-specific functions to
  * do the actual navigating.
  * @param {boolean} isInTab Indicates if the PDF viewer is displayed in a tab.
- * @param {boolean} isSourceFileUrl Indicates if the navigation source is a
- *     file:// URL.
  */
-function NavigatorDelegate(isInTab, isSourceFileUrl) {
+function NavigatorDelegate(isInTab) {
   this.isInTab_ = isInTab;
-  this.isSourceFileUrl_ = isSourceFileUrl;
 }
 
 /**
  * Creates a new Navigator for navigating to links inside or outside the PDF.
  * @param {string} originalUrl The original page URL.
  * @param {Object} viewport The viewport info of the page.
  * @param {Object} paramsParser The object for URL parsing.
  * @param {Object} navigatorDelegate The object with callback functions that
  *    get called when navigation happens in the current tab, a new tab,
  *    and a new window.
  */
 function Navigator(originalUrl, viewport, paramsParser, navigatorDelegate) {
   this.originalUrl_ = originalUrl;
   this.viewport_ = viewport;
   this.paramsParser_ = paramsParser;
   this.navigatorDelegate_ = navigatorDelegate;
 }
 
 NavigatorDelegate.prototype = {
   /**
    * @public
    * Called when navigation should happen in the current tab.
    * @param {string} url The url to be opened in the current tab.
    */
   navigateInCurrentTab: function(url) {
     // When the PDFviewer is inside a browser tab, prefer the tabs API because
     // it can navigate from one file:// URL to another.
-    if (chrome.tabs && this.isInTab_ && this.isSourceFileUrl_)
+    if (chrome.tabs && this.isInTab_)
       chrome.tabs.update({url: url});
     else
       window.location.href = url;
   },
 
   /**
    * @public
    * Called when navigation should happen in the new tab.
    * @param {string} url The url to be opened in the new tab.
    * @param {boolean} active Indicates if the new tab should be the active tab.
@@ skipping 112 matching lines @@
 
     var pageNumber = viewportPosition.page;
     if (pageNumber != undefined && originalUrl == newUrl)
       this.viewport_.goToPage(pageNumber);
     else
       this.navigatorDelegate_.navigateInCurrentTab(viewportPosition.url);
   },
 
   /**
    * @private
-   * Checks if the URL starts with a scheme and s not just a scheme.
+   * Checks if the URL starts with a scheme and is not just a scheme.
    * @param {string} The input URL
    * @return {boolean} Whether the url is valid.
    */
   isValidUrl_: function(url) {
     // Make sure |url| starts with a valid scheme.
     if (!url.startsWith('http://') &&
         !url.startsWith('https://') &&
         !url.startsWith('ftp://') &&
         !url.startsWith('file://') &&
         !url.startsWith('mailto:')) {
       return false;
     }
 
+    // Navigations to file:-URLs are only allowed from file:-URLs.
+    if (url.startsWith('file:') && !this.originalUrl_.startsWith('file:'))
+      return false;
+
+
     // Make sure |url| is not only a scheme.
     if (url == 'http://' ||
         url == 'https://' ||
         url == 'ftp://' ||
         url == 'file://' ||
         url == 'mailto:') {
       return false;
     }
 
     return true;
@@ skipping 49 matching lines @@
     if (isRelative) {
       var slashIndex = this.originalUrl_.lastIndexOf('/');
       var path = slashIndex != -1 ?
           this.originalUrl_.substr(0, slashIndex) : this.originalUrl_;
       return path + '/' + url;
     }
 
     return 'http://' + url;
   }
 };