Module url 

Which addresses an embedded frame may load: a port of isSafeFrameUrl in upstream’s webview.ts.

An allowlist, because a webview’s address bar is a navigation primitive: javascript: or data: in it is a script-injection sink aimed at the host page. Unknown schemes fail closed.

Enums

Refusal

Why an address was refused.

Functions

frame_url

The address to load for what the user typed, or why it was refused.

is_secure

Whether the address is served over TLS, for the address bar’s lock. None for addresses with no transport, such as about:blank.