Only accept HTTP and HTTPS urls for opensearch descriptor.

chrome/browser/ui/search_engines/search_engine_tab_helper.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/ui/search_engines/search_engine_tab_helper.h"
 
 #include "chrome/browser/profiles/profile.h"
 #include "chrome/browser/search_engines/template_url_fetcher_factory.h"
 #include "chrome/browser/search_engines/template_url_service_factory.h"
 #include "chrome/browser/ui/search_engines/search_engine_tab_helper_delegate.h"
@@ skipping 92 matching lines @@
 
 void SearchEngineTabHelper::OnPageHasOSDD(
     const GURL& page_url,
     const GURL& osdd_url,
     const search_provider::OSDDType& msg_provider_type) {
   // Checks to see if we should generate a keyword based on the OSDD, and if
   // necessary uses TemplateURLFetcher to download the OSDD and create a
   // keyword.
 
   // Make sure that the page is the current page and other basic checks.
-  if (!osdd_url.is_valid())
+  // When |page_url| has file: scheme, this method doesn't work because of
+  // http://b/issue?id=863583. For that reason, this doesn't check and allow
+  // urls referring to osdd urls with same schemes.
+  if (!osdd_url.is_valid() || !osdd_url.SchemeIsHTTPOrHTTPS())
     return;
+
   Profile* profile =
       Profile::FromBrowserContext(web_contents()->GetBrowserContext());
   if (page_url != web_contents()->GetLastCommittedURL() ||
       !TemplateURLFetcherFactory::GetForProfile(profile) ||
       profile->IsOffTheRecord())
     return;
 
   TemplateURLFetcher::ProviderType provider_type =
       (msg_provider_type == search_provider::AUTODETECTED_PROVIDER) ?
           TemplateURLFetcher::AUTODETECTED_PROVIDER :
@@ skipping 95 matching lines @@
   // the favicon url wasn't obtained before the load started. This assumes the
   // latter.
   // TODO(sky): Need a way to set the favicon that doesn't involve generating
   // its url.
   data.favicon_url = current_favicon.is_valid() ?
       current_favicon : TemplateURL::GenerateFaviconURL(params.referrer.url);
   data.safe_for_autoreplace = true;
   data.input_encodings.push_back(params.searchable_form_encoding);
   url_service->Add(new TemplateURL(data));
 }