To fix the cross-site post submission bug.

content/public/browser/navigation_controller.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CONTENT_PUBLIC_BROWSER_NAVIGATION_CONTROLLER_H_
 #define CONTENT_PUBLIC_BROWSER_NAVIGATION_CONTROLLER_H_
 
 #include <map>
 #include <string>
 #include <vector>
 
+#include "content/public/common/frame_navigate_params.h"
+
 #include "base/memory/ref_counted.h"
 #include "base/string16.h"
 #include "content/common/content_export.h"
 #include "content/public/browser/global_request_id.h"
 #include "content/public/common/page_transition_types.h"
 #include "content/public/common/referrer.h"
 #include "googleurl/src/gurl.h"
 
 namespace base {
 
 class RefCountedMemory;
 
 }  // namespace base
 
 namespace content {
 
 class BrowserContext;
 class NavigationEntry;
 class SessionStorageNamespace;
 class WebContents;
+struct WebHTTPPOSTBodyParams;
 
 // Used to store the mapping of a StoragePartition id to
 // SessionStorageNamespace.
 typedef std::map<std::string, scoped_refptr<SessionStorageNamespace> >
     SessionStorageNamespaceMap;
 
 // A NavigationController maintains the back-forward list for a WebContents and
 // manages all navigation within that list.
 //
 // Each NavigationController belongs to one WebContents; each WebContents has
@@ skipping 99 matching lines @@
 
     // Used in LOAD_TYPE_DATA loads only. URL displayed to the user for
     // data loads.
     GURL virtual_url_for_data_url;
 
     // Used in LOAD_TYPE_BROWSER_INITIATED_HTTP_POST loads only. Carries the
     // post data of the load. Ownership is transferred to NavigationController
     // after LoadURLWithParams call.
     scoped_refptr<base::RefCountedMemory> browser_initiated_post_data;
 
+    // post data
+    std::vector<content::WebHTTPPOSTBodyParams> post_data;
+
     // True if this URL should be able to access local resources.
     bool can_load_local_resources;
 
     explicit LoadURLParams(const GURL& url);
     ~LoadURLParams();
 
     // Allows copying of LoadURLParams struct.
     LoadURLParams(const LoadURLParams& other);
     LoadURLParams& operator=(const LoadURLParams& other);
   };
@@ skipping 210 matching lines @@
   virtual void CopyStateFromAndPrune(NavigationController* source) = 0;
 
   // Removes all the entries except the active entry. If there is a new pending
   // navigation it is preserved.
   virtual void PruneAllButActive() = 0;
 };
 
 }  // namespace content
 
 #endif  // CONTENT_PUBLIC_BROWSER_NAVIGATION_CONTROLLER_H_