Test downloads.download() disallows unsafe headers

chrome/browser/ui/webui/downloads_dom_handler.cc

Index: chrome/browser/ui/webui/downloads_dom_handler.cc
diff --git a/chrome/browser/ui/webui/downloads_dom_handler.cc b/chrome/browser/ui/webui/downloads_dom_handler.cc
index 514ae7a0157fa46445cbfb804f5e7814e6292aef..02e6932124d8d3a29fdbd5366eab1f17b38542fc 100644
--- a/chrome/browser/ui/webui/downloads_dom_handler.cc
+++ b/chrome/browser/ui/webui/downloads_dom_handler.cc
@@ -212,9 +212,10 @@ void DownloadsDOMHandler::ModelChanged(content::DownloadManager* manager) {
 
   sort(download_items_.begin(), download_items_.end(), DownloadItemSorter());
 
-  // Remove any extension downloads.
+  // Remove any extension downloads and hidden downloads.
   for (size_t i = 0; i < download_items_.size();) {
-    if (download_crx_util::IsExtensionDownload(*download_items_[i]))
+    if (download_crx_util::IsExtensionDownload(*download_items_[i]) ||
+        DownloadHidden::Get(download_items_[i]))
       download_items_.erase(download_items_.begin() + i);
     else
       i++;