When Chrome hands off a URL to be opened by the external host by the ViewHost...

chrome_frame/chrome_active_document.h

 // Copyright (c) 2009 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CHROME_FRAME_CHROME_ACTIVE_DOCUMENT_H_
 #define CHROME_FRAME_CHROME_ACTIVE_DOCUMENT_H_
 
 #include <atlbase.h>
 #include <atlcom.h>
 #include <atlctl.h>
@@ skipping 197 matching lines @@
   bool PreProcessContextMenu(HMENU menu);
   bool HandleContextMenuCommand(UINT cmd);
 
   // Should connections initiated by this class try to block
   // responses served with the X-Frame-Options header?
   bool is_frame_busting_enabled();
 
  protected:
   // ChromeFrameActivexBase overrides
   virtual void OnOpenURL(int tab_handle, const GURL& url_to_open,
-                         int open_disposition);
+                         const GURL& referrer, int open_disposition);
 
   virtual void OnLoad(int tab_handle, const GURL& url);
   virtual void OnGoToHistoryEntryOffset(int tab_handle, int offset);
 
   // A helper method that updates our internal navigation state
   // as well as IE's navigation state (viz Title and current URL).
   // The navigation_flags is a TabContents::InvalidateTypes enum
   void UpdateNavigationState(const IPC::NavigationInfo& nav_info);
 
   TabProxy* GetTabProxy() const {
@@ skipping 59 matching lines @@
   ScopedComPtr<IInternetSecurityManager> security_manager_;
 
  public:
   ScopedComPtr<IOleInPlaceFrame> in_place_frame_;
   OLEINPLACEFRAMEINFO frame_info_;
 };
 
 OBJECT_ENTRY_AUTO(__uuidof(ChromeActiveDocument), ChromeActiveDocument)
 
 #endif  // CHROME_FRAME_CHROME_ACTIVE_DOCUMENT_H_