Block renderer-initiated main frame navigations to data URLs

third_party/WebKit/Source/platform/network/NetworkUtils.cpp

 // Copyright 2016 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "platform/network/NetworkUtils.h"
 
 #include "components/mime_util/mime_util.h"
 #include "net/base/data_url.h"
 #include "net/base/ip_address.h"
 #include "net/base/net_errors.h"
@@ skipping 87 matching lines @@
   size_t iter = 0;
   std::string name;
   std::string value;
   while (headers->EnumerateHeaderLines(&iter, &name, &value)) {
     response.addHTTPHeaderField(WebString::fromLatin1(name),
                                 WebString::fromLatin1(value));
   }
   return data;
 }
 
+PLATFORM_EXPORT bool getDataURLMimeType(const KURL& url,
+                                        AtomicString& mimetype,
+                                        bool* isSupportedMimeType) {
+  std::string utf8MimeType;
+  std::string utf8Charset;
+  if (net::DataURL::Parse(WebStringToGURL(url.getString()), &utf8MimeType,
+                          &utf8Charset, nullptr)) {
+    *isSupportedMimeType = mime_util::IsSupportedMimeType(utf8MimeType);
+    return true;
+  }
+  return false;
+}
+
 bool isRedirectResponseCode(int responseCode) {
   return net::HttpResponseHeaders::IsRedirectResponseCode(responseCode);
 }
 
 }  // NetworkUtils
 
 }  // namespace blink