Block renderer-initiated main frame navigations to data URLs

third_party/WebKit/public/web/WebFrameClient.h

 /*
  * Copyright (C) 2011, 2012 Google Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions are
  * met:
  *
  *     * Redistributions of source code must retain the above copyright
  * notice, this list of conditions and the following disclaimer.
  *     * Redistributions in binary form must reproduce the above
@@ skipping 654 matching lines @@
   virtual WebString doNotTrackValue() { return WebString(); }
 
   // WebGL ------------------------------------------------------
 
   // Asks the embedder whether WebGL is allowed for the WebFrame. This call is
   // placed here instead of WebContentSettingsClient because this class is
   // implemented in content/, and putting it here avoids adding more public
   // content/ APIs.
   virtual bool allowWebGL(bool defaultValue) { return defaultValue; }
 
+  // Asks the embedder whether the frame is allowed to navigate the main frame
+  // to a data URL.
+  virtual bool allowContentInitiatedDataUrlNavigations(const WebURL&) {
+    return false;
+  }

[kinuko, 2017/04/07 07:52:34]

This should not be in 'WebGL' category, please move or split the section.

Is this only to check error page URL? It feels a bit sad to have all this
plumbing just for that.

[meacer, 2017/04/11 01:08:51]

Done.
Yes, unfortunately it's only for the error page.

+
   // Screen Orientation --------------------------------------------------
 
   // Access the embedder API for (client-based) screen orientation client .
   virtual WebScreenOrientationClient* webScreenOrientationClient() { return 0; }
 
   // Accessibility -------------------------------------------------------
 
   // Notifies embedder about an accessibility event.
   virtual void postAccessibilityEvent(const WebAXObject&, WebAXEvent) {}
 
@@ skipping 71 matching lines @@
   // Overwrites the given URL to use an HTML5 embed if possible.
   // An empty URL is returned if the URL is not overriden.
   virtual WebURL overrideFlashEmbedWithHTML(const WebURL& url) {
     return WebURL();
   }
 };
 
 }  // namespace blink
 
 #endif