Block renderer-initiated main frame navigations to data URLs

third_party/WebKit/Source/platform/network/NetworkUtils.cpp

 // Copyright 2016 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "platform/network/NetworkUtils.h"
 
 #include "components/mime_util/mime_util.h"
 #include "net/base/data_url.h"
 #include "net/base/ip_address.h"
 #include "net/base/net_errors.h"
@@ skipping 87 matching lines @@
   size_t iter = 0;
   std::string name;
   std::string value;
   while (headers->EnumerateHeaderLines(&iter, &name, &value)) {
     response.AddHTTPHeaderField(WebString::FromLatin1(name),
                                 WebString::FromLatin1(value));
   }
   return data;
 }
 
+bool IsDataURLMimeTypeSupported(const KURL& url) {
+  std::string utf8_mime_type;
+  std::string utf8_charset;
+  if (net::DataURL::Parse(WebStringToGURL(url.GetString()), &utf8_mime_type,

[dcheng, 2017/04/19 11:59:49]

Hmm... it would be kind of nice if we had a way to turn KURL into GURL without
reparsing here (out of scope of this CL though)

[meacer, 2017/04/21 01:31:21]

Acknowledged. I can file a bug, but there doesn't seem to be many places doing
this conversion.

+                          &utf8_charset, nullptr)) {
+    return mime_util::IsSupportedMimeType(utf8_mime_type);
+  }
+  return false;
+}
+
 bool IsRedirectResponseCode(int response_code) {
   return net::HttpResponseHeaders::IsRedirectResponseCode(response_code);
 }
 
 }  // NetworkUtils
 
 }  // namespace blink