Block renderer-initiated main frame navigations to data URLs

content/renderer/render_frame_impl.cc

Index: content/renderer/render_frame_impl.cc
diff --git a/content/renderer/render_frame_impl.cc b/content/renderer/render_frame_impl.cc
index 4b25c97a1395c02efaa633f8b1ff34ff6d6eb48f..ab864dc8d5cdeb714c19ad4d9be9aa29891699f7 100644
--- a/content/renderer/render_frame_impl.cc
+++ b/content/renderer/render_frame_impl.cc
@@ -4707,6 +4707,12 @@ bool RenderFrameImpl::allowWebGL(bool default_value) {
   return !blocked;
 }
 
+bool RenderFrameImpl::allowContentInitiatedDataUrlNavigations(
+    const blink::WebURL& url) {
+  // Error pages can navigate to data URLs.
+  return url.string() == kUnreachableWebDataURL;
+}
+
 blink::WebScreenOrientationClient*
     RenderFrameImpl::webScreenOrientationClient() {
   if (!screen_orientation_dispatcher_)