diff options
| author | mef@chromium.org <mef@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2013-04-10 22:46:13 +0000 |
|---|---|---|
| committer | mef@chromium.org <mef@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2013-04-10 22:46:13 +0000 |
| commit | 99ecf6eef0b28879e5b9dba05da0c9d32691c0be (patch) | |
| tree | c02057a76f13e77ca167f3f1db149d16f2760eb2 /chrome/browser/automation/url_request_automation_job.cc | |
| parent | 3b617e991afabdac1bf69908b853af8ca847a5e9 (diff) | |
| download | chromium_src-99ecf6eef0b28879e5b9dba05da0c9d32691c0be.zip chromium_src-99ecf6eef0b28879e5b9dba05da0c9d32691c0be.tar.gz chromium_src-99ecf6eef0b28879e5b9dba05da0c9d32691c0be.tar.bz2 | |
Remove URL fragment from referrer HTTP header (to comply with rfc2616) when opening link using "Open Link in New Tab" option.
Change URLRequest::set_referrer to URLRequest::SetReferrer which sanitizes referrer by removing URL fragment, user name and password.
Remove URLRequest::GetSanitizedReferrer as URLRequest::referrer is now sanitized during set.
BUG=168213
TEST=net_unittests, browser_tests
Review URL: https://chromiumcodereview.appspot.com/12569007
git-svn-id: svn://svn.chromium.org/chrome/trunk/src@193482 0039d316-1c4b-4281-b951-d872f2087c98
Diffstat (limited to 'chrome/browser/automation/url_request_automation_job.cc')
| -rw-r--r-- | chrome/browser/automation/url_request_automation_job.cc | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/chrome/browser/automation/url_request_automation_job.cc b/chrome/browser/automation/url_request_automation_job.cc index f10bce4e..a9ff357 100644 --- a/chrome/browser/automation/url_request_automation_job.cc +++ b/chrome/browser/automation/url_request_automation_job.cc @@ -472,8 +472,9 @@ void URLRequestAutomationJob::StartAsync() { } } - // Ensure that we do not send username and password fields in the referrer. - GURL referrer(request_->GetSanitizedReferrer()); + // URLRequest::SetReferrer() ensures that we do not send username and + // password fields in the referrer. + GURL referrer(request_->referrer()); // The referrer header must be suppressed if the preceding URL was // a secure one and the new one is not. |