Add an ability to call WebKit's WebFrame::loadData via NavigationController.

content/public/browser/navigation_controller.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CONTENT_PUBLIC_BROWSER_NAVIGATION_CONTROLLER_H_
 #define CONTENT_PUBLIC_BROWSER_NAVIGATION_CONTROLLER_H_
 #pragma once
 
 #include <string>
 #include <vector>
@@ skipping 149 matching lines @@
                        PageTransition type,
                        const std::string& extra_headers) = 0;
 
   // Same as LoadURL, but for renderer-initiated navigations.  This state is
   // important for tracking whether to display pending URLs.
   virtual void LoadURLFromRenderer(const GURL& url,
                                    const Referrer& referrer,
                                    PageTransition type,
                                    const std::string& extra_headers) = 0;
 
+  // Loads a 'data:' scheme URL with specified base URL and a history entry URL.
+  // This can only be used for browser-initiated navigations.

[Charlie Reis, 2012/06/19 17:17:25]

Thanks.  Now that I know a bit more, I think we need to provide a stronger
warning here.  Something like "This is only safe to be used for
browser-initiated data: URL navigations, since it shows arbitrary content as if
it comes from |history_url|."

[mnaganov (inactive), 2012/07/03 08:07:52]

Done. Sorry, I was swamped by other tasks, now I'm returning back to this issue.

+  virtual void LoadDataWithBaseURL(const GURL& data_url,
+                                   const Referrer& referrer,
+                                   const GURL& base_url,
+                                   const GURL& history_url,
+                                   bool is_overriding_user_agent) = 0;
+
   // Behaves like LoadURL() and LoadURLFromRenderer() but marks the new
   // navigation as being transferred from one RVH to another. In this case the
   // browser can recycle the old request once the new renderer wants to
   // navigate.
   // |transferred_global_request_id| identifies the request ID of the old
   // request.
   virtual void TransferURL(
       const GURL& url,
       const Referrer& referrer,
       PageTransition transition,
@@ skipping 80 matching lines @@
   virtual void CopyStateFromAndPrune(NavigationController* source) = 0;
 
   // Removes all the entries except the active entry. If there is a new pending
   // navigation it is preserved.
   virtual void PruneAllButActive() = 0;
 };
 
 }  // namespace content
 
 #endif  // CONTENT_PUBLIC_BROWSER_NAVIGATION_CONTROLLER_H_