Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(454)

Issues Search
    My Issues | Starred     Open | Closed | All

Unified Diff: third_party/WebKit/public/web/WebFrameClient.h

Issue 2702503002: Block renderer-initiated main frame navigations to data URLs (Closed)
Patch Set: Re-block data to data navigations, rebase, address nasko comments Created 3 years, 8 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
« content/test/data/data_url_navigations.html ('K') | « third_party/WebKit/Source/web/LocalFrameClientImpl.cpp ('k') | no next file » | no next file with comments »
Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
Index: third_party/WebKit/public/web/WebFrameClient.h
diff --git a/third_party/WebKit/public/web/WebFrameClient.h b/third_party/WebKit/public/web/WebFrameClient.h
index 0fd5e49fd26d68b8ef62a66d36ae0a2beb9b5840..810954047c7497780073c9b60cf7fbadb642e113 100644
--- a/third_party/WebKit/public/web/WebFrameClient.h
+++ b/third_party/WebKit/public/web/WebFrameClient.h
@@ -672,6 +672,10 @@ class BLINK_EXPORT WebFrameClient {
// content/ APIs.
virtual bool allowWebGL(bool defaultValue) { return defaultValue; }
+ // Asks the embedder whether the frame is allowed to navigate the main frame
+ // to a data URL.
+ virtual bool allowInsecureDataUrlNavigations(const WebURL&) { return false; }
+
// Screen Orientation --------------------------------------------------
// Access the embedder API for (client-based) screen orientation client .
« content/test/data/data_url_navigations.html ('K') | « third_party/WebKit/Source/web/LocalFrameClientImpl.cpp ('k') | no next file » | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698