Block redirects to renderer-debug urls.

content/browser/child_process_security_policy_impl.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CONTENT_BROWSER_CHILD_PROCESS_SECURITY_POLICY_IMPL_H_
 #define CONTENT_BROWSER_CHILD_PROCESS_SECURITY_POLICY_IMPL_H_
 
 #include <map>
 #include <memory>
 #include <set>
@@ skipping 252 matching lines @@
   //   https://unisolated.com/           -->  (unique origin)
   bool GetMatchingIsolatedOrigin(const url::Origin& origin,
                                  url::Origin* result);
 
   // Removes a previously added isolated origin, currently only used in tests.
   //
   // TODO(alexmos): Exposing this more generally will require extra care, such
   // as ensuring that there are no active SiteInstances in that origin.
   void RemoveIsolatedOriginForTesting(const url::Origin& origin);
 
+  // Returns false for redirects that must be blocked no matter which renderer
+  // process initiated the request (if any).
+  // Note: Checking CanRedirectToURL is not enough. CanRequestURL(child_id, url)
+  //       represents a stricter subset. It must be used when appropriate (i.e.

[Charlie Reis, 2017/07/10 21:16:22]

Slight rephrase: It must also be used for renderer-initiated navigations.

[arthursonzogni, 2017/07/11 16:21:31]

Done.

+  //       for renderer initiated navigations).
+  bool CanRedirectToURL(const GURL& url);
+
  private:
   friend class ChildProcessSecurityPolicyInProcessBrowserTest;
   friend class ChildProcessSecurityPolicyTest;
   FRIEND_TEST_ALL_PREFIXES(ChildProcessSecurityPolicyInProcessBrowserTest,
                            NoLeak);
   FRIEND_TEST_ALL_PREFIXES(ChildProcessSecurityPolicyTest, FilePermissions);
   FRIEND_TEST_ALL_PREFIXES(ChildProcessSecurityPolicyTest,
                            IsolateOriginsFromCommandLine);
 
   class SecurityState;
@@ skipping 84 matching lines @@
   // eTLD+1. Each of these origins requires a dedicated process.  This set is
   // protected by |lock_|.
   std::set<url::Origin> isolated_origins_;
 
   DISALLOW_COPY_AND_ASSIGN(ChildProcessSecurityPolicyImpl);
 };
 
 }  // namespace content
 
 #endif  // CONTENT_BROWSER_CHILD_PROCESS_SECURITY_POLICY_IMPL_H_