Block renderer-initiated main frame navigations to data URLs

third_party/WebKit/Source/core/frame/LocalFrameClient.h

 /*
  * Copyright (C) 2006, 2007, 2008, 2009, 2010, 2011, 2012 Apple Inc. All rights
  * reserved.
  * Copyright (C) 2012 Google Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions
  * are met:
  *
  * 1.  Redistributions of source code must retain the above copyright
@@ skipping 218 matching lines @@
   virtual void RunScriptsAtDocumentIdle() = 0;
 
   virtual void DidCreateScriptContext(v8::Local<v8::Context>, int world_id) = 0;
   virtual void WillReleaseScriptContext(v8::Local<v8::Context>,
                                         int world_id) = 0;
   virtual bool AllowScriptExtensions() = 0;
 
   virtual void DidChangeScrollOffset() {}
   virtual void DidUpdateCurrentHistoryItem() {}
 
+  // Called when a content-initiated, main frame navigation to a data URL is
+  // about to occur.
+  virtual bool AllowContentInitiatedDataUrlNavigations(const KURL&) {
+    return false;
+  }
+
   virtual WebCookieJar* CookieJar() const = 0;
 
   virtual void DidChangeName(const String&) {}
 
   virtual void DidEnforceInsecureRequestPolicy(WebInsecureRequestPolicy) {}
 
   virtual void DidUpdateToUniqueOrigin() {}
 
   virtual void DidChangeFramePolicy(Frame* child_frame,
                                     SandboxFlags,
@@ skipping 69 matching lines @@
   virtual void SetHasReceivedUserGesture(bool received_previously) {}
 
   virtual void AbortClientNavigation() {}
 
   virtual TextCheckerClient& GetTextCheckerClient() const = 0;
 };
 
 }  // namespace blink
 
 #endif  // LocalFrameClient_h