When ChromeFrame is running in privileged mode, we should fail the IAuthentic...

chrome_frame/urlmon_url_request.cc

Index: chrome_frame/urlmon_url_request.cc
===================================================================
--- chrome_frame/urlmon_url_request.cc	(revision 42240)
+++ chrome_frame/urlmon_url_request.cc	(working copy)
@@ -39,7 +39,8 @@
     : pending_read_size_(0),
       headers_received_(false),
       thread_(NULL),
-      parent_window_(NULL) {
+      parent_window_(NULL),
+      privileged_mode_(false) {
   DLOG(INFO) << StringPrintf("Created request. Obj: %X", this);
 }
 
@@ -546,10 +547,12 @@
 STDMETHODIMP UrlmonUrlRequest::Authenticate(HWND* parent_window,
                                             LPWSTR* user_name,
                                             LPWSTR* password) {
-  if (!parent_window) {
+  if (!parent_window)
     return E_INVALIDARG;
-  }
 
+  if (privileged_mode_)
+    return E_FAIL;
+
   DCHECK(::IsWindow(parent_window_));
   *parent_window = parent_window_;
   return S_OK;
@@ -897,6 +900,7 @@
       request_info.upload_data,
       enable_frame_busting_);
   new_request->set_parent_window(notification_window_);
+  new_request->set_privileged_mode(privileged_mode_);
 
   // Shall we use previously fetched data?
   if (request_for_url.get()) {
@@ -1039,7 +1043,8 @@
 
 UrlmonUrlRequestManager::UrlmonUrlRequestManager()
     : stopping_(false), worker_thread_("UrlMon fetch thread"),
-      map_empty_(true, true), notification_window_(NULL) {
+      map_empty_(true, true), notification_window_(NULL),
+      privileged_mode_(false) {
 }
 
 UrlmonUrlRequestManager::~UrlmonUrlRequestManager() {