Show scheme in black and content in gray for data: protocol urls

chrome/browser/ui/cocoa/omnibox/omnibox_view_mac.mm

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/ui/cocoa/omnibox/omnibox_view_mac.h"
 
 #include <Carbon/Carbon.h>  // kVK_Return
 
 #include "base/mac/foundation_util.h"
 #include "base/memory/ptr_util.h"
@@ skipping 553 matching lines @@
                            range:as_entire_string];
 
   [attributedString addAttribute:NSForegroundColorAttributeName
                            value:HostTextColor(in_dark_mode)
                            range:as_entire_string];
 
   url::Component scheme, host;
   AutocompleteInput::ParseForEmphasizeComponents(
       display_text, ChromeAutocompleteSchemeClassifier(profile_), &scheme,
       &host);
-  bool grey_out_url = display_text.substr(scheme.begin, scheme.len) ==
-      base::UTF8ToUTF16(extensions::kExtensionScheme);
+
+  const base::string16 url_scheme =
+      display_text.substr(scheme.begin, scheme.len);
+
+  // Is the scheme one that might be abused for spoofing purposes?
+  bool spoofy_scheme = url_scheme == base::UTF8ToUTF16(url::kDataScheme);
+
+  // Should the full URL be deemphasized?
+  bool grey_out_url =
+      (spoofy_scheme ||
+       url_scheme == base::UTF8ToUTF16(extensions::kExtensionScheme));
+
   if (model()->CurrentTextIsURL() &&
       (host.is_nonempty() || grey_out_url)) {
     [attributedString addAttribute:NSForegroundColorAttributeName
                              value:BaseTextColor(in_dark_mode)
                              range:as_entire_string];
 
     if (!grey_out_url) {
       [attributedString addAttribute:NSForegroundColorAttributeName
                                value:HostTextColor(in_dark_mode)
                                range:ComponentToNSRange(host)];
+    } else if (spoofy_scheme) {
+      [attributedString addAttribute:NSForegroundColorAttributeName
+                               value:HostTextColor(in_dark_mode)
+                               range:ComponentToNSRange(scheme)];
     }
   }
 
   // TODO(shess): GTK has this as a member var, figure out why.
   // [Could it be to not change if no change?  If so, I'm guessing
   // AppKit may already handle that.]
   const security_state::SecurityLevel security_level =
       controller()->GetToolbarModel()->GetSecurityLevel(false);
 
   // Emphasize the scheme for security UI display purposes (if necessary).
@@ skipping 492 matching lines @@
                               display_text);
   NSDictionary* notification_info = @{
       NSAccessibilityAnnouncementKey : announcement,
       NSAccessibilityPriorityKey :     @(NSAccessibilityPriorityHigh)
   };
   NSAccessibilityPostNotificationWithUserInfo(
       [field_ window],
       NSAccessibilityAnnouncementRequestedNotification,
       notification_info);
 }