Top level navigations are not sent to the host browser in the ChromeFrame NPA...

chrome_frame/chrome_frame_activex.cc

 // Copyright (c) 2010 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome_frame/chrome_frame_activex.h"
 
 #include <wininet.h>
 
 #include <algorithm>
 #include <map>
@@ skipping 445 matching lines @@
     }
 
     std::string utf8_url;
     if (url_.Length()) {
       WideToUTF8(url_, url_.Length(), &utf8_url);
     }
 
     // Only privileged instances of ActiveX Chrome Frame controls may read
     // the chrome-network, and top-level-navigation settings from the registry.
     // See issue: 54920
-    if (is_privileged_)
-      InitializeAutomationSettings();
+    InitializeAutomationSettings();
 
     url_fetcher_->set_frame_busting(!is_privileged_);
     automation_client_->SetUrlFetcher(url_fetcher_.get());
     if (!InitializeAutomation(profile_name, chrome_extra_arguments,
                               IsIEInPrivate(), true, GURL(utf8_url),
-                              GURL())) {
+                              GURL(), false)) {
       DLOG(ERROR) << "Failed to navigate to url:" << utf8_url;
       return E_FAIL;
     }
 
     // Log a metric that Chrome Frame is being used in Widget mode
     THREAD_SAFE_UMA_LAUNCH_TYPE_COUNT(RENDERER_TYPE_CHROME_WIDGET);
   }
 
   return hr;
 }
@@ skipping 176 matching lines @@
   if (FAILED(hr)) {
     NOTREACHED() << "ChromeFrame BHO SetSite failed. Error:"
                  << StringPrintf(" 0x%08X", hr);
     return hr;
   }
 
   web_browser2->PutProperty(ScopedBstr(bho_class_id_as_string),
                             ScopedVariant(bho));
   return S_OK;
 }