Throw in window.open() when an invalid URL is being passed

third_party/WebKit/Source/core/frame/Window.idl

 /*
  * Copyright (C) 2006, 2007, 2008, 2009 Apple Inc. All rights reserved.
  * Copyright (C) 2011 Google Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions
  * are met:
  * 1. Redistributions of source code must retain the above copyright
  *    notice, this list of conditions and the following disclaimer.
  * 2. Redistributions in binary form must reproduce the above copyright
@@ skipping 45 matching lines @@
 
     // other browsing contexts
     [Replaceable, CrossOrigin] readonly attribute Window frames;
     [Replaceable, CrossOrigin] readonly attribute unsigned long length;
     [Unforgeable, CrossOrigin] readonly attribute Window? top;
     // FIXME: opener should be of type any.
     [CrossOrigin, Custom=Setter] attribute Window opener;
     [Replaceable, CrossOrigin] readonly attribute Window? parent;
     [CheckSecurity=ReturnValue, Custom=Getter] readonly attribute Element? frameElement;
     // FIXME: open() should have 4 optional arguments with defaults.
-    [Custom] Window? open(DOMString url, DOMString target, optional DOMString features);
+    [Custom, RaisesException] Window? open(DOMString url, DOMString target, optional DOMString features);

[foolip, 2017/05/05 11:21:29]

FYI, I wondered if returning null is still possible, and it is: "If
tokenizedFeatures contains an entry with the key "noopener", then disown target
browsing context's opener and return null."

[jochen (gone - plz use gerrit), 2017/05/05 11:25:51]

correct, that should return null. Also note that the PR against html didn't
change the idl

[foolip, 2017/05/05 11:28:55]

Yeah, just verifying since sometimes the exception is the only thing missing to
never return null.

 
     // indexed properties
     // https://html.spec.whatwg.org/C/browsers.html#windowproxy-getownproperty
     [NotEnumerable, CrossOrigin] getter Window (unsigned long index);
     // https://html.spec.whatwg.org/C/browsers.html#windowproxy-defineownproperty
     setter void (unsigned long index, any value);
 
     // named properties
     [Custom, NotEnumerable, CrossOrigin] getter object (DOMString name);
 
@@ skipping 141 matching lines @@
 // FIXME: make this typedef accurate once enough of https://crbug.com/240176
 // is in place.
 // FIXME: consider putting this typedef in an .idl file containing spec-wide
 // utility type definitions.
 typedef MessagePort Transferable;
 
 Window implements GlobalEventHandlers;
 Window implements WindowBase64;
 Window implements WindowEventHandlers;
 Window implements WindowTimers;