bool MockCanAddURLToHistory(const GURL& url) {
  return url.is_valid() && !url.SchemeIs(kApplicationScheme);
}

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.