Block renderer-initiated main frame navigations to data URLs

content/renderer/render_frame_impl.cc

Index: content/renderer/render_frame_impl.cc
diff --git a/content/renderer/render_frame_impl.cc b/content/renderer/render_frame_impl.cc
index 4b25c97a1395c02efaa633f8b1ff34ff6d6eb48f..f6a488e26d9ad90a7d092b6fee0ce01e2fb2e129 100644
--- a/content/renderer/render_frame_impl.cc
+++ b/content/renderer/render_frame_impl.cc
@@ -4707,6 +4707,12 @@ bool RenderFrameImpl::allowWebGL(bool default_value) {
   return !blocked;
 }
 
+bool RenderFrameImpl::allowInsecureDataUrlNavigations(
+    const blink::WebURL& url) {
+  // Error pages can navigate to data URLs.
+  return url.string() == kUnreachableWebDataURL;

[nasko, 2017/04/05 23:55:19]

Given this implementation, naming this method
"allowContentInitiatedDataUrlNavigations" sounds a bit better to me. Error pages
are pretty much secure as they are local : ).

[meacer, 2017/04/06 01:25:42]

Done.

+}
+
 blink::WebScreenOrientationClient*
     RenderFrameImpl::webScreenOrientationClient() {
   if (!screen_orientation_dispatcher_)