OOPIF: Data URLs are now rendered in the renderer that initiated the navigation.

content/browser/frame_host/navigator.h

Index: content/browser/frame_host/navigator.h
diff --git a/content/browser/frame_host/navigator.h b/content/browser/frame_host/navigator.h
index 5063faf20e525e5bd01b3ea71cf92b5dca876cfd..11f946e7ecc345d43c6971710d2cbcf70bd98fa2 100644
--- a/content/browser/frame_host/navigator.h
+++ b/content/browser/frame_host/navigator.h
@@ -95,6 +95,7 @@ class CONTENT_EXPORT Navigator : public base::RefCounted<Navigator> {
   // specified |disposition|.
   virtual void RequestOpenURL(RenderFrameHostImpl* render_frame_host,
                               const GURL& url,
+                              SiteInstance* site_instance,

[Charlie Reis, 2014/11/20 19:58:43]

It's not clear from the API what this is for.  It doesn't match
|render_frame_host|'s SiteInstance, and it's not always used.  A better name and
comment would help unless we can come up with a simpler approach.

[lfg, 2014/12/05 21:55:42]

Done.

                               const Referrer& referrer,
                               WindowOpenDisposition disposition,
                               bool should_replace_current_entry,
@@ -106,6 +107,7 @@ class CONTENT_EXPORT Navigator : public base::RefCounted<Navigator> {
   virtual void RequestTransferURL(
       RenderFrameHostImpl* render_frame_host,
       const GURL& url,
+      SiteInstance* site_instance,
       const std::vector<GURL>& redirect_chain,
       const Referrer& referrer,
       ui::PageTransition page_transition,