| Index: chrome/browser/ui/webui/chrome_web_ui_controller_factory.cc
|
| diff --git a/chrome/browser/ui/webui/chrome_web_ui_controller_factory.cc b/chrome/browser/ui/webui/chrome_web_ui_controller_factory.cc
|
| index 1e46a388594a6fba6f7542de86d2240253021fb8..449fbedfcf801c981c35d2b0ea0cd39f2888bd31 100644
|
| --- a/chrome/browser/ui/webui/chrome_web_ui_controller_factory.cc
|
| +++ b/chrome/browser/ui/webui/chrome_web_ui_controller_factory.cc
|
| @@ -13,6 +13,7 @@
|
| #include "base/threading/thread_task_runner_handle.h"
|
| #include "build/build_config.h"
|
| #include "chrome/browser/about_flags.h"
|
| +#include "chrome/browser/devtools/devtools_ui_bindings.h"
|
| #include "chrome/browser/dom_distiller/dom_distiller_service_factory.h"
|
| #include "chrome/browser/engagement/site_engagement_service.h"
|
| #include "chrome/browser/profiles/profile.h"
|
| @@ -525,9 +526,11 @@ WebUIFactoryFunction GetWebUIFactoryFunction(WebUI* web_ui,
|
| return &NewWebUI<VrShellUIUI>;
|
| #endif
|
| #else
|
| - if (url.SchemeIs(content::kChromeDevToolsScheme))
|
| + if (url.SchemeIs(content::kChromeDevToolsScheme)) {
|
| + if (!DevToolsUIBindings::IsValidFrontendURL(url))
|
| + return nullptr;
|
| return &NewWebUI<DevToolsUI>;
|
| -
|
| + }
|
| // chrome://inspect isn't supported on Android nor iOS. Page debugging is
|
| // handled by a remote devtools on the host machine, and other elements, i.e.
|
| // extensions aren't supported.
|
|
|