Unescape BiDi control chars while parsing data urls

net/base/escape.h

Index: net/base/escape.h
diff --git a/net/base/escape.h b/net/base/escape.h
index 1915d24418883a2186ffc329733a93bc43938085..d4d612c0988c9a801418f4b04a1b83e887266697 100644
--- a/net/base/escape.h
+++ b/net/base/escape.h
@@ -93,6 +93,13 @@ class UnescapeRule {
 
     // URL queries use "+" for space. This flag controls that replacement.
     REPLACE_PLUS_WITH_SPACE = 16,
+
+    // Unescapes Bidi characters such as RTL/LTR marks. This should only be used
+    // when parsing data urls, but never be used when displaying the url in
+    // the omnibox. URLs in the omnibox should always escape BiDi control
+    // characters for security reasons.
+    // DO NOT use BIDI_CONTROL_CHARS flag without talking to a security person.
+    BIDI_CONTROL_CHARS = 32,
   };
 };