Block redirects to renderer-debug urls.

content/public/browser/child_process_security_policy.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CONTENT_PUBLIC_BROWSER_CHILD_PROCESS_SECURITY_POLICY_H_
 #define CONTENT_PUBLIC_BROWSER_CHILD_PROCESS_SECURITY_POLICY_H_
 
 #include <string>
 
 #include "content/common/content_export.h"
@@ skipping 69 matching lines @@
   virtual void GrantCopyInto(int child_id, const base::FilePath& dir) = 0;
 
   // This permission grants delete permission for |dir|.
   virtual void GrantDeleteFrom(int child_id, const base::FilePath& dir) = 0;
 
   // Determine whether the process has the capability to request the URL.
   // Before servicing a child process's request for a URL, the content layer
   // calls this method to determine whether it is safe.
   virtual bool CanRequestURL(int child_id, const GURL& url) = 0;
 
+  // Determine whether a redirect is allowed to proceed.

[Charlie Reis, 2017/07/07 17:13:00]

Please clarify why this needs to be different than CanRequestURL.  It's not
obvious at first glance how they would differ.

[arthursonzogni, 2017/07/10 16:07:04]

Done.

+  virtual bool CanRedirectToURL(const GURL& url) = 0;

[Charlie Reis, 2017/07/07 17:13:00]

This doesn't appear to be used outside content/, so it shouldn't be in the
public interface.  Can you make it be a public method on
ChildProcessSecurityPolicyImpl instead?

[arthursonzogni, 2017/07/10 16:07:04]

Done.

+
   // Whether the process is allowed to commit a document from the given URL.
   // This is more restrictive than CanRequestURL, since CanRequestURL allows
   // requests that might lead to cross-process navigations or external protocol
   // handlers.
   virtual bool CanCommitURL(int child_id, const GURL& url) = 0;
 
   // These methods verify whether or not the child process has been granted
   // permissions perform these functions on |file|.
 
   // Before servicing a child process's request to upload a file to the web, the
@@ skipping 106 matching lines @@
   // <webview> guest process has permission to request blob URLs in its
   // embedder's origin on the IO thread.  This should be removed once that
   // check is superseded by a UI thread check.  See https://crbug.com/656752.
   virtual bool HasSpecificPermissionForOrigin(int child_id,
                                               const url::Origin& origin) = 0;
 };
 
 }  // namespace content
 
 #endif  // CONTENT_PUBLIC_BROWSER_CHILD_PROCESS_SECURITY_POLICY_H_