DevTools: Display a warning when trying to open untrusted frontend

chrome/browser/devtools/devtools_window.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/devtools/devtools_window.h"
 
 #include <algorithm>
 
 #include "base/command_line.h"
 #include "base/json/json_reader.h"
@@ skipping 604 matching lines @@
                           external_frontend));
   return new DevToolsWindow(profile, url, inspected_rvh, dock_side);
 }
 
 // static
 GURL DevToolsWindow::GetDevToolsURL(Profile* profile,
                                     const GURL& base_url,
                                     DevToolsDockSide dock_side,
                                     bool shared_worker_frontend,
                                     bool external_frontend) {
+  if (base_url.SchemeIs("data"))
+    return base_url;
+
   std::string frontend_url(
       base_url.is_empty() ? chrome::kChromeUIDevToolsURL : base_url.spec());
   ThemeService* tp = ThemeServiceFactory::GetForProfile(profile);
   DCHECK(tp);
   std::string url_string(
       frontend_url +
       ((frontend_url.find("?") == std::string::npos) ? "?" : "&") +
       "dockSide=" + SideToString(dock_side) +
       "&toolbarColor=" +
       SkColorToRGBAString(tp->GetColor(ThemeProperties::COLOR_TOOLBAR)) +
@@ skipping 731 matching lines @@
 
 void DevToolsWindow::Restore() {
   if (dock_side_ == DEVTOOLS_DOCK_SIDE_MINIMIZED)
     SetDockSide(SideToString(dock_side_before_minimized_));
 }
 
 content::WebContents* DevToolsWindow::GetInspectedWebContents() {
   return inspected_contents_observer_ ?
       inspected_contents_observer_->web_contents() : NULL;
 }