Block renderer-initiated main frame navigations to data URLs

third_party/WebKit/public/web/WebFrameClient.h

 /*
  * Copyright (C) 2011, 2012 Google Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions are
  * met:
  *
  *     * Redistributions of source code must retain the above copyright
  * notice, this list of conditions and the following disclaimer.
  *     * Redistributions in binary form must reproduce the above
@@ skipping 308 matching lines @@
       const NavigationPolicyInfo& info) {
     return info.default_policy;
   }
 
   // During a history navigation, we may choose to load new subframes from
   // history as well.  This returns such a history item if appropriate.
   virtual WebHistoryItem HistoryItemForNewChildFrame() {
     return WebHistoryItem();
   }
 
+  // Asks the embedder whether the frame is allowed to navigate the main frame
+  // to a data URL.

[kinuko, 2017/04/19 07:07:44]

Please add a TODO to consider converging this into DecidePolicyForNavigation

[dcheng, 2017/04/19 11:59:49]

+1

[meacer, 2017/04/21 01:31:21]

Done.

+  virtual bool AllowContentInitiatedDataUrlNavigations(const WebURL&) {
+    return false;
+  }
+
   // Navigational notifications ------------------------------------------
 
   // These notifications bracket any loading that occurs in the WebFrame.
   virtual void DidStartLoading(bool to_different_document) {}
   virtual void DidStopLoading() {}
 
   // Notification that some progress was made loading the current frame.
   // loadProgress is a value between 0 (nothing loaded) and 1.0 (frame fully
   // loaded).
   virtual void DidChangeLoadProgress(double load_progress) {}
@@ skipping 419 matching lines @@
   // Overwrites the given URL to use an HTML5 embed if possible.
   // An empty URL is returned if the URL is not overriden.
   virtual WebURL OverrideFlashEmbedWithHTML(const WebURL& url) {
     return WebURL();
   }
 };
 
 }  // namespace blink
 
 #endif