Index: chrome/browser/ui/webui/chrome_web_ui_controller_factory.cc |
diff --git a/chrome/browser/ui/webui/chrome_web_ui_controller_factory.cc b/chrome/browser/ui/webui/chrome_web_ui_controller_factory.cc |
index 7f3886a4ea991961c4939069352a719dc38588ae..b75d7a081926e530389f99d2361fb6b22e02aaa4 100644 |
--- a/chrome/browser/ui/webui/chrome_web_ui_controller_factory.cc |
+++ b/chrome/browser/ui/webui/chrome_web_ui_controller_factory.cc |
@@ -13,6 +13,7 @@ |
#include "base/threading/thread_task_runner_handle.h" |
#include "build/build_config.h" |
#include "chrome/browser/about_flags.h" |
+#include "chrome/browser/devtools/devtools_ui_bindings.h" |
#include "chrome/browser/dom_distiller/dom_distiller_service_factory.h" |
#include "chrome/browser/engagement/site_engagement_service.h" |
#include "chrome/browser/profiles/profile.h" |
@@ -517,9 +518,11 @@ WebUIFactoryFunction GetWebUIFactoryFunction(WebUI* web_ui, |
return &NewWebUI<VrShellUIUI>; |
#endif |
#else |
- if (url.SchemeIs(content::kChromeDevToolsScheme)) |
+ if (url.SchemeIs(content::kChromeDevToolsScheme)) { |
+ if (!DevToolsUIBindings::IsValidFrontendURL(url)) |
+ return nullptr; |
return &NewWebUI<DevToolsUI>; |
- |
+ } |
// chrome://inspect isn't supported on Android nor iOS. Page debugging is |
// handled by a remote devtools on the host machine, and other elements, i.e. |
// extensions aren't supported. |