Allow showing pending URL for new tab navigations, but only if safe.

content/browser/renderer_host/render_view_host_delegate.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CONTENT_BROWSER_RENDERER_HOST_RENDER_VIEW_HOST_DELEGATE_H_
 #define CONTENT_BROWSER_RENDERER_HOST_RENDER_VIEW_HOST_DELEGATE_H_
 
 #include <string>
 
 #include "base/basictypes.h"
@@ skipping 201 matching lines @@
 
   // The RenderView made progress loading a page's top frame.
   // |progress| is a value between 0 (nothing loaded) to 1.0 (top frame
   // entirely loaded).
   virtual void DidChangeLoadProgress(double progress) {}
 
   // The RenderView set its opener to null, disowning it for the lifetime of
   // the window.
   virtual void DidDisownOpener(RenderViewHost* rvh) {}
 
+  // Another page accessed the initial empty document of this RenderView,
+  // which means it is no longer safe to display a pending URL without
+  // risking a URL spoof.
+  virtual void DidAccessInitialDocument() {}
+
   // The RenderView has changed its frame hierarchy, so we need to update all
   // other renderers interested in this event.
   virtual void DidUpdateFrameTree(RenderViewHost* rvh) {}
 
   // The RenderView's main frame document element is ready. This happens when
   // the document has finished parsing.
   virtual void DocumentAvailableInMainFrame(RenderViewHost* render_view_host) {}
 
   // The onload handler in the RenderView's main frame has completed.
   virtual void DocumentOnLoadCompletedInMainFrame(
@@ skipping 184 matching lines @@
       const MediaStreamRequest& request,
       const MediaResponseCallback& callback) {}
 
  protected:
   virtual ~RenderViewHostDelegate() {}
 };
 
 }  // namespace content
 
 #endif  // CONTENT_BROWSER_RENDERER_HOST_RENDER_VIEW_HOST_DELEGATE_H_