Block renderer-initiated main frame navigations to data URLs

third_party/WebKit/public/web/WebFrameClient.h

Index: third_party/WebKit/public/web/WebFrameClient.h
diff --git a/third_party/WebKit/public/web/WebFrameClient.h b/third_party/WebKit/public/web/WebFrameClient.h
index b32fe0821df8bc716529a01e726c54a87fd298f4..1792f5b611efda557771a9e7adea1b0c3f7cb704 100644
--- a/third_party/WebKit/public/web/WebFrameClient.h
+++ b/third_party/WebKit/public/web/WebFrameClient.h
@@ -330,6 +330,14 @@ class BLINK_EXPORT WebFrameClient {
     return WebHistoryItem();
   }
 
+  // Asks the embedder whether the frame is allowed to navigate the main frame
+  // to a data URL.
+  // TODO(crbug.com/713259): Move renderer side checks to
+  //                         RenderFrameImpl::DecidePolicyForNavigation().
+  virtual bool AllowContentInitiatedDataUrlNavigations(const WebURL&) {
+    return false;
+  }
+
   // Navigational notifications ------------------------------------------
 
   // These notifications bracket any loading that occurs in the WebFrame.