[Autofill] Sanitize all data that comes in over IPC.

components/autofill/content/renderer/form_autofill_util.cc

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "components/autofill/content/renderer/form_autofill_util.h"
 
 #include <map>
 
 #include "base/command_line.h"
 #include "base/logging.h"
 #include "base/memory/scoped_vector.h"
 #include "base/metrics/field_trial.h"
 #include "base/strings/string_util.h"
 #include "base/strings/utf_string_conversions.h"
+#include "components/autofill/core/common/autofill_data_sanitizer.h"
 #include "components/autofill/core/common/autofill_switches.h"
 #include "components/autofill/core/common/form_data.h"
 #include "components/autofill/core/common/form_field_data.h"
 #include "components/autofill/core/common/web_element_descriptor.h"
 #include "third_party/WebKit/public/platform/WebString.h"
 #include "third_party/WebKit/public/platform/WebVector.h"
 #include "third_party/WebKit/public/web/WebDocument.h"
 #include "third_party/WebKit/public/web/WebElement.h"
 #include "third_party/WebKit/public/web/WebExceptionCode.h"
 #include "third_party/WebKit/public/web/WebFormControlElement.h"
@@ skipping 19 matching lines @@
 using blink::WebNodeList;
 using blink::WebOptionElement;
 using blink::WebSelectElement;
 using blink::WebTextAreaElement;
 using blink::WebString;
 using blink::WebVector;
 
 namespace autofill {
 namespace {
 
-// The maximum length allowed for form data.
-const size_t kMaxDataLength = 1024;
-
 // A bit field mask for FillForm functions to not fill some fields.
 enum FieldFilterMask {
   FILTER_NONE                       = 0,
   FILTER_DISABLED_ELEMENTS          = 1 << 0,
   FILTER_READONLY_ELEMENTS          = 1 << 1,
   FILTER_NON_FOCUSABLE_ELEMENTS     = 1 << 2,
   FILTER_ALL_NON_EDITIABLE_ELEMENTS = FILTER_DISABLED_ELEMENTS |
                                       FILTER_READONLY_ELEMENTS |
                                       FILTER_NON_FOCUSABLE_ELEMENTS,
 };
@@ skipping 1084 matching lines @@
         break;
       }
     }
     if (!tag_is_allowed)
       return false;
   }
   return true;
 }
 
 }  // namespace autofill