Block renderer-initiated main frame navigations to data URLs

third_party/WebKit/Source/platform/RuntimeEnabledFeatures.json5

 {
   // http://dev.chromium.org/blink/runtime-enabled-features
   //
   // This list is used to generate RuntimeEnabledFeatures.h/cpp which contains
   // a class that stores static enablers for all experimental features.
 
   parameters: {
     // Each feature can be assigned a "status":
     // status=stable -> Enable this in all Blink configurations.  We are committed to these APIs indefinitely.
     // status=experimental -> In-progress features, Web Developers might play with, but are not on by default in stable.
@@ skipping 53 matching lines @@
       name: "Accelerated2dCanvas",
       settable_from_internals: true,
       status: "stable",
     },
     {
       name: "AccessibilityObjectModel",
       settable_from_internals: true,
       status: "experimental",
     },
     {
+      name: "AllowContentInitiatedDataUrlNavigations",
+      status: "stable",
+    },
+    {
       name: "AudioOutputDevices",
       status: "stable",
     },
     {
       name: "AudioVideoTracks",
       status: "experimental",
     },
     {
       name: "AudioWorklet",
       status: "experimental",
@@ skipping 958 matching lines @@
     {
       name: "Worklet",
       status: "experimental",
     },
     {
       name: "XSLT",
       status: "stable",
     },
   ],
 }