Cherry pick r96826. Add check for JavaScript URLs in HTMLPlugInImageElement::allowedToLoadFrameURL Bug: 17658625 Change-Id: Icb7249526aa5f38dd6f93ad67fe7a21ad713d31b