Fix ChromeFrame referrer test which was flaky due to incorrect http header pa...

chrome_frame/urlmon_url_request.cc

 // Copyright (c) 2009 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome_frame/urlmon_url_request.h"
 
 #include <wininet.h>
 #include <urlmon.h>
 
 #include "base/scoped_ptr.h"
@@ skipping 479 matching lines @@
   // hosted as iframes. For NPAPI and ActiveX documents, the Initialize()
   // function of the PluginUrlRequest object allows them to specify how they'd
   // like requests handled. Both should set enable_frame_busting_ to true to
   // avoid CSRF attacks. Should WebKit's handling of this ever change, we will
   // need to re-visit how and when frames are killed to better mirror a policy
   // which may do something other than kill the sub-document outright.
 
   // NOTE(slightlyoff): We don't use net::HttpResponseHeaders here because
   //    of lingering ICU/base_noicu issues.
   if (enable_frame_busting_) {
-    std::string http_headers = net::HttpUtil::AssembleRawHeaders(
-        raw_headers.c_str(), raw_headers.length());
-    if (http_utils::HasFrameBustingHeader(http_headers)) {
+    if (http_utils::HasFrameBustingHeader(raw_headers)) {
       DLOG(ERROR) << "X-Frame-Options header other than ALLOWALL " <<
           "detected, navigation canceled";
       return E_FAIL;
     }
   }
 
   DLOG(INFO) << "Calling OnResponseStarted";
 
   // Inform the delegate.
   headers_received_ = true;
@@ skipping 603 matching lines @@
     privacy_entry.flags |= flags;
     privacy_entry.policy_ref = UTF8ToWide(policy_ref);
   }
 
   if (fire_privacy_event && IsWindow(notification_window_)) {
     PostMessage(notification_window_, WM_FIRE_PRIVACY_CHANGE_NOTIFICATION, 1,
                 0);
   }
 }