To fix the cross-site post submission bug.

content/common/view_messages.h

Index: content/common/view_messages.h
diff --git a/content/common/view_messages.h b/content/common/view_messages.h
index a09c03ed998a0a1625f7365c6016b2f6f769eedd..5b8a2a0404237facce6d7baf5c69cb5b0840f4ee 100644
--- a/content/common/view_messages.h
+++ b/content/common/view_messages.h
@@ -45,6 +45,7 @@
 #include "ui/gfx/rect.h"
 #include "ui/gfx/rect_f.h"
 #include "ui/gfx/vector2d.h"
+#include "webkit/glue/resource_request_body.h"
 #include "webkit/glue/webcookie.h"
 #include "webkit/glue/webmenuitem.h"
 #include "webkit/glue/webpreferences.h"
@@ -736,13 +737,21 @@ IPC_STRUCT_BEGIN(ViewMsg_Navigate_Params)
 
   // If is_post is true, holds the post_data information from browser. Empty
   // otherwise.
-  IPC_STRUCT_MEMBER(std::vector<unsigned char>, browser_initiated_post_data)
+  IPC_STRUCT_MEMBER(scoped_refptr<webkit_glue::ResourceRequestBody>,
+                    browser_initiated_post_data)
 
   // Whether or not this url should be allowed to access local file://
   // resources.
   IPC_STRUCT_MEMBER(bool, can_load_local_resources)
 IPC_STRUCT_END()
 
+// Parameters for a resource request.
+IPC_STRUCT_BEGIN(ViewMsg_PostRequest_Params)
+  IPC_STRUCT_MEMBER(std::string, extra_header)
+  IPC_STRUCT_MEMBER(scoped_refptr<webkit_glue::ResourceRequestBody>,
+                    request_body)
+IPC_STRUCT_END()
+
 IPC_STRUCT_BEGIN(ViewMsg_New_Params)
   // The parent window's id.
   IPC_STRUCT_MEMBER(gfx::NativeViewId, parent_window)
@@ -1895,6 +1904,14 @@ IPC_MESSAGE_ROUTED4(ViewHostMsg_OpenURL,
                     WindowOpenDisposition /* disposition */,
                     int64 /* frame id */)
 
+// Requests that the given URL be opened in the specified manner.
+IPC_MESSAGE_ROUTED5(ViewHostMsg_OpenPostURL,

[michaeln, 2012/11/05 23:38:29]

Instead of defining a new message that lives in parallel with the OpenURL
message, i think we should consider consolidating the two. Our ipc macros only
support up to 5 params. When we hit that limit, what we generally do is define a
'struct' to contain all of the params to be sent, and then spec the ipc to take
the struct only, and name the struct as such...

 IPC_MESSAGE_ROUTED1(ViewHostMsg_OpenURL,
                     ViewHostMsg_OpenURL_Params)

I think we could do that here and add the additional params for POST case to
that struct...
  bool is_post;
  std::string post_content_type;
  scoped_refptr<ResourceRequestBody> post_body;
  std::string post_method; // maybe this one isn't needed?

The way you've named the inner struct in this CL makes my eyes burn because it
doesn't really follow that pattern despite being named in that <msg_name>_Params
fashion.

[irobert, 2012/11/06 05:39:20]

Done.

+                    GURL /* url */,
+                    content::Referrer /* referrer */,
+                    WindowOpenDisposition /* disposition */,
+                    int64 /* frame id */,
+                    ViewMsg_PostRequest_Params /* request */)
+
 // Notifies that the preferred size of the content changed.
 IPC_MESSAGE_ROUTED1(ViewHostMsg_DidContentsPreferredSizeChange,
                     gfx::Size /* pref_size */)