Don't sanitize errors if the protocol is "data:"

third_party/WebKit/Source/core/dom/ExecutionContext.cpp

 /*
  * Copyright (C) 2008 Apple Inc. All Rights Reserved.
  * Copyright (C) 2012 Google Inc. All Rights Reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions
  * are met:
  * 1. Redistributions of source code must retain the above copyright
  *    notice, this list of conditions and the following disclaimer.
  * 2. Redistributions in binary form must reproduce the above copyright
@@ skipping 80 matching lines @@
   // Ensure all SuspendableObjects are suspended also newly created ones.
   if (m_isContextSuspended)
     object->suspend();
 }
 
 bool ExecutionContext::shouldSanitizeScriptError(
     const String& sourceURL,
     AccessControlStatus corsStatus) {
   if (corsStatus == OpaqueResource)
     return true;
-  return !(getSecurityOrigin()->canRequestNoSuborigin(completeURL(sourceURL)) ||
+  const KURL& url = completeURL(sourceURL);
+  if (url.protocolIsData())
+    return false;
+  return !(getSecurityOrigin()->canRequestNoSuborigin(url) ||
            corsStatus == SharableCrossOrigin);
 }
 
 void ExecutionContext::dispatchErrorEvent(ErrorEvent* errorEvent,
                                           AccessControlStatus corsStatus) {
   if (m_inDispatchErrorEvent) {
     m_pendingExceptions.push_back(errorEvent);
     return;
   }
 
@@ skipping 119 matching lines @@
 }
 
 DEFINE_TRACE(ExecutionContext) {
   visitor->trace(m_publicURLManager);
   visitor->trace(m_pendingExceptions);
   ContextLifecycleNotifier::trace(visitor);
   Supplementable<ExecutionContext>::trace(visitor);
 }
 
 }  // namespace blink