To fix the cross-site post submission bug.

content/browser/renderer_host/render_view_host_impl.cc

Index: content/browser/renderer_host/render_view_host_impl.cc
diff --git a/content/browser/renderer_host/render_view_host_impl.cc b/content/browser/renderer_host/render_view_host_impl.cc
index c3067a29547f034484e207f5275f13558684330f..1a52fff25372ce0dc7ebe57b580fa739173bc191 100644
--- a/content/browser/renderer_host/render_view_host_impl.cc
+++ b/content/browser/renderer_host/render_view_host_impl.cc
@@ -992,6 +992,7 @@ bool RenderViewHostImpl::OnMessageReceived(const IPC::Message& msg) {
     IPC_MESSAGE_HANDLER(ViewHostMsg_ToggleFullscreen,
                         OnMsgToggleFullscreen)
     IPC_MESSAGE_HANDLER(ViewHostMsg_OpenURL, OnMsgOpenURL)
+    IPC_MESSAGE_HANDLER(ViewHostMsg_OpenPostURL, OnMsgOpenPostURL)
     IPC_MESSAGE_HANDLER(ViewHostMsg_DidContentsPreferredSizeChange,
                         OnMsgDidContentsPreferredSizeChange)
     IPC_MESSAGE_HANDLER(ViewHostMsg_DidChangeScrollbarsForMainFrame,
@@ -1365,6 +1366,21 @@ void RenderViewHostImpl::OnMsgOpenURL(const GURL& url,
       this, validated_url, referrer, disposition, source_frame_id);
 }
 
+void RenderViewHostImpl::OnMsgOpenPostURL(const GURL& url,
+                                      const content::Referrer& referrer,
+                                      WindowOpenDisposition disposition,
+                                      int64 source_frame_id,
+                                      std::vector<content::WebHTTPPOSTBodyParams> post_data) {
+  GURL validated_url(url);
+  FilterURL(ChildProcessSecurityPolicyImpl::GetInstance(),
+            GetProcess()->GetID(), false, &validated_url);
+
+  delegate_->RequestOpenPostURL(
+      this, validated_url, referrer, disposition, source_frame_id,
+      true, /* is_post */

[michaeln, 2012/10/23 23:22:18]

Is the bool param needed for this method which seems to imply POST already?

[irobert, 2012/10/24 00:51:17]

Yes. You are right.

On 2012/10/23 23:22:18, michaeln wrote:

+      post_data /* post_data */);
+}
+
 void RenderViewHostImpl::OnMsgDidContentsPreferredSizeChange(
     const gfx::Size& new_size) {
   delegate_->UpdatePreferredSize(new_size);