[iOS] Escape image URL

Bug: 1164846
Change-Id: I975c02ac34bb4e37a06ae7759eaffb7984f95065
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2628024Reviewed-by: Eugene But <eugenebut@chromium.org>
Reviewed-by: Chris Thompson <cthomp@chromium.org>
Commit-Queue: Mike Dougherty <michaeldo@chromium.org>
Cr-Commit-Position: refs/heads/master@{#844174}

ios/chrome/browser/web/image_fetch_tab_helper.mm

@@ -6,6 +6,7 @@
 
 #include "base/base64.h"
 #include "base/bind.h"
+#include "base/json/string_escape.h"
 #include "base/metrics/histogram_macros.h"
 #include "base/strings/stringprintf.h"
 #include "base/strings/utf_string_conversions.h"
@@ -137,8 +138,8 @@ void ImageFetchTabHelper::GetImageDataByJs(const GURL& url,
       timeout);
 
   std::string js =
-      base::StringPrintf("__gCrWeb.imageFetch.getImageData(%d, '%s')", call_id_,
-                         url.spec().c_str());
+      base::StringPrintf("__gCrWeb.imageFetch.getImageData(%d, %s)", call_id_,
+                         base::GetQuotedJSONString(url.spec()).c_str());
 
   web_state_->ExecuteJavaScript(base::UTF8ToUTF16(js));
 }