1 files changed, 59 insertions, 0 deletions
diff --git a/chromium/content/browser/frame_host/webui_navigation_throttle.cc b/chromium/content/browser/frame_host/webui_navigation_throttle.cc
new file mode 100644
index 00000000000..625b1cb19fe
--- /dev/null
+++ b/chromium/content/browser/frame_host/webui_navigation_throttle.cc
@@ -0,0 +1,59 @@
+// Copyright 2017 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#include "content/browser/frame_host/webui_navigation_throttle.h"
+
+#include "content/browser/child_process_security_policy_impl.h"
+#include "content/browser/frame_host/navigation_handle_impl.h"
+#include "content/browser/frame_host/render_frame_host_impl.h"
+#include "content/public/browser/navigation_handle.h"
+#include "content/public/common/url_constants.h"
+
+namespace content {
+
+WebUINavigationThrottle::WebUINavigationThrottle(
+    NavigationHandle* navigation_handle)
+    : NavigationThrottle(navigation_handle) {}
+
+WebUINavigationThrottle::~WebUINavigationThrottle() {}
+
+NavigationThrottle::ThrottleCheckResult
+WebUINavigationThrottle::WillStartRequest() {
+  // Allow only chrome: scheme documents to be navigated to.
+  if (navigation_handle()->GetURL().SchemeIs(kChromeUIScheme))
+    return PROCEED;
+
+  return BLOCK_REQUEST;
+}
+
+const char* WebUINavigationThrottle::GetNameForLogging() {
+  return "WebUINavigationThrottle";
+}
+
+// static
+std::unique_ptr<NavigationThrottle>
+WebUINavigationThrottle::CreateThrottleForNavigation(
+    NavigationHandle* navigation_handle) {
+  // Create the throttle only for subframe navigations.
+  if (navigation_handle->IsInMainFrame())
+    return nullptr;
+
+  RenderFrameHostImpl* parent =
+      static_cast<NavigationHandleImpl*>(navigation_handle)
+          ->frame_tree_node()
+          ->parent()
+          ->current_frame_host();
+
+  // Create a throttle only for navigations where the parent frame is either
+  // at a chrome:// URL or is in a process with WebUI bindings.
+  if (ChildProcessSecurityPolicyImpl::GetInstance()->HasWebUIBindings(
+          parent->GetProcess()->GetID()) ||
+      parent->GetLastCommittedURL().SchemeIs(kChromeUIScheme)) {
+    return std::make_unique<WebUINavigationThrottle>(navigation_handle);
+  }
+
+  return nullptr;
+}
+
+}  // namespace content