New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 915349 link

Starred by 2 users

Issue metadata

Status: Assigned
Owner:
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: 2
Type: Bug



Sign in to add a comment

New tab page does not navigate to a data url.

Project Member Reported by alph@chromium.org, Dec 14

Issue description

1. Type the following line to the omnibox:
data:text/html,<body style="margin:0"><div style="margin:100px;border:2px solid red;border-radius:20px;width:100px;height:200px;background-color:pink"/></body>

2. Make open the new tab page
3. Click the the page link for the dataurl.

Nothing happens.
 
Labels: zine-triaged
Labels: Needs-Feedback
Can you provide more details on this bug?  I can enter the data line in the omnibox and hit enter to display a pink box.  Then I open a new tab, which shows the new tab page.  Then what?
Then you should have a tile for the dataurl page under the search box on the new tab page. Click it. It does nothing on click.
Can you clarify how do you do the step 2 ?
I don't think it matters. I close and reopen Chromium. I think you can just open a new tab. You just need to make it show the dataurl page among the most used pages.
Cc: kristip...@chromium.org
Status: Verified (was: Untriaged)
I verified that 
data:text/html,<body style="margin:0"><div style="margin:100px;border:2px solid red;border-radius:20px;width:100px;height:200px;background-color:pink"/></body>

works from omnibox but does nothing from custom links. 

kristipark@ what do you think?

Status: WontFix (was: Verified)
data URLs are not supported for Most Visited sites. This is intended behavior, as this protects against potentially malicious sites. The Most Visited tile will still be shown, but it will be unclickable.
Does it make sense to add them to the most visited?
Cc: ma...@chromium.org ramyan@chromium.org
+mathp

Since the tiles are modifiable now, it'll probably be good to revisit the TopSites filter (server suggestions might be okay?). Right now, it uses HistoryBackendClient::IsWebSafe, which does allow data URLs. The filter can be updated to a whitelist of only http, https, ftp, and chrome-extension. WDYT Mathieu?
I don't have a strong opinion, but I think it would be reasonable to only support HTTP/HTTPS on new tab page tiles.
Should we reopen the issue?
Status: Assigned (was: WontFix)
Re-opening to only support http, https, ftp, and chrome-extension for TopSites.
Owner: kristip...@chromium.org

Sign in to add a comment