Add a resource throttle for sub frame unless scheme of uri is acceptable

chrome/android/java/src/org/chromium/chrome/browser/UrlUtilities.java

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 package org.chromium.chrome.browser;
 
 import android.text.TextUtils;
 
+import org.chromium.base.CalledByNative;
 import org.chromium.base.CollectionUtil;
 
 import java.net.URI;
 import java.net.URISyntaxException;
 import java.util.HashSet;
 
 /**
  * Utilities for working with URIs (and URLs). These methods may be used in security-sensitive
  * contexts (after all, origins are the security boundary on the web), and so the correctness bar
  * must be high.
  */
 public class UrlUtilities {
     /**
      * URI schemes that ContentView can handle.
      */
     private static final HashSet<String> ACCEPTED_SCHEMES = CollectionUtil.newHashSet(
         "about", "data", "file", "http", "https", "inline", "javascript");

[davidben, 2014/09/29 21:40:44]

This list seems incomplete. Chrome can handle quite a few schemes. There's ftp
URLs. Or a web+blah scheme might be registerProtocolHandler'd. Some WebUI on
desktop at least under the chrome: scheme will iframe other pages under the
chrome: scheme.

There's also other schemes that are meaningful, though I don't know if the can
be iframed. view-source:, blob:, filesystem:. Probably others I'm missing.

[Jaekyun Seok (inactive), 2014/09/29 22:17:18]

I don't know well about this list. But most of others seem for downloadable
schemes. Maybe we can extend ACCEPTED_SCHEMES and DOWNLOADABLE_SCHEMES later in
a separated CL.

Anyway, I will modify codes to check if the url has a downloadable scheme as
well.

 
     /**
      * URI schemes that Chrome can download.
      */
     private static final HashSet<String> DOWNLOADABLE_SCHEMES = CollectionUtil.newHashSet(
         "data", "filesystem", "http", "https");
 
     /**
      * @param uri A URI.
      *
      * @return True if the URI's scheme is one that ContentView can handle.
      */
     public static boolean isAcceptedScheme(URI uri) {
         return ACCEPTED_SCHEMES.contains(uri.getScheme());
     }
 
     /**
      * @param uri A URI.
      *
      * @return True if the URI's scheme is one that ContentView can handle.
      */
+    @CalledByNative
     public static boolean isAcceptedScheme(String uri) {
         try {
             return isAcceptedScheme(new URI(uri));
         } catch (URISyntaxException e) {
             return false;
         }
     }
 
     /**
      * @param uri A URI.
@@ skipping 151 matching lines @@
 
     private static native boolean nativeSameDomainOrHost(String primaryUrl, String secondaryUrl,
             boolean includePrivateRegistries);
     private static native String nativeGetDomainAndRegistry(String url,
             boolean includePrivateRegistries);
     public static native boolean nativeIsGoogleSearchUrl(String url);
     public static native boolean nativeIsGoogleHomePageUrl(String url);
     public static native String nativeFixupUrl(String url, String desiredTld);
     private static native boolean nativeIsGooglePropertyUrl(String url);
 }