When Chrome hands off a URL to be opened by the external host by the ViewHost...

chrome_frame/chrome_frame_activex_base.h

 // Copyright (c) 2009 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CHROME_FRAME_CHROME_FRAME_ACTIVEX_BASE_H_
 #define CHROME_FRAME_CHROME_FRAME_ACTIVEX_BASE_H_
 
 #include <atlbase.h>
 #include <atlcom.h>
 #include <atlctl.h>
@@ skipping 257 matching lines @@
     if (client_site) {
       doc_site_.QueryFrom(client_site);
     }
 
     return CComControlBase::IOleObject_SetClientSite(client_site);
   }
 
   bool HandleContextMenuCommand(UINT cmd) {
     if (cmd == IDC_ABOUT_CHROME_FRAME) {
       int tab_handle = automation_client_->tab()->handle();
-      OnOpenURL(tab_handle, GURL("about:version"), NEW_WINDOW);
+      OnOpenURL(tab_handle, GURL("about:version"), GURL(), NEW_WINDOW);
       return true;
     }
 
     return false;
   }
 
   // Should connections initiated by this class try to block
   // responses served with the X-Frame-Options header?
   // ActiveX controls genereally will want to do this,
   // returning true, while true top-level documents
@@ skipping 11 matching lines @@
 
     HWND parent = ::GetParent(m_hWnd);
     ::SetFocus(parent);
     ScopedComPtr<IOleControlSite> control_site;
     control_site.QueryFrom(m_spClientSite);
     if (control_site)
       control_site->OnFocus(FALSE);
   }
 
   virtual void OnOpenURL(int tab_handle, const GURL& url_to_open,
-                         int open_disposition) {
+                         const GURL& referrer, int open_disposition) {
     ScopedComPtr<IWebBrowser2> web_browser2;
     DoQueryService(SID_SWebBrowserApp, m_spClientSite, web_browser2.Receive());
     DCHECK(web_browser2);
 
     ScopedVariant url;
     // Check to see if the URL uses a "view-source:" prefix, if so, open it
     // using chrome frame full tab mode by using 'cf:' protocol handler.
     // Also change the disposition to NEW_WINDOW since IE6 doesn't have tabs.
     if (url_to_open.has_scheme() && (url_to_open.SchemeIs("view-source") ||
                                      url_to_open.SchemeIs("about"))) {
@@ skipping 51 matching lines @@
     //   CreateUri(UTF8ToWide(open_url_command->url_.spec()).c_str(),
     //             Uri_CREATE_IE_SETTINGS, 0, &uri);
     //   CComPtr<IBindCtx> bind_ctx;
     //   CreateBindCtx(0, &bind_ctx);
     //   target_frame->AggregatedNavigation2(
     //       HLNF_TRUSTFIRSTDOWNLOAD|HLNF_OPENINNEWWINDOW, bind_ctx, NULL,
     //       L"No_Name", uri, L"");
     // }
     // End of MSHTML-like logic
     VARIANT empty = ScopedVariant::kEmptyVariant;
-    web_browser2->Navigate2(url.AsInput(), &flags, &empty, &empty, &empty);
+    ScopedVariant http_headers;
+
+    if (referrer.is_valid()) {
+      std::wstring referrer_header = L"Referer: ";
+      referrer_header += UTF8ToWide(referrer.spec());
+      referrer_header += L"\r\n\r\n";
+      http_headers.Set(referrer_header.c_str());
+    }
+
+    web_browser2->Navigate2(url.AsInput(), &flags, &empty, &empty,
+                            http_headers.AsInput());
     web_browser2->put_Visible(VARIANT_TRUE);
   }
 
   virtual void OnRequestStart(int tab_handle, int request_id,
                               const IPC::AutomationURLRequest& request_info) {
     scoped_refptr<CComObject<UrlmonUrlRequest> > request;
     if (base_url_request_.get() &&
         GURL(base_url_request_->url()) == GURL(request_info.url)) {
       request.swap(base_url_request_);
     } else {
@@ skipping 42 matching lines @@
                                   data.c_str());
     DCHECK(ret) << "InternetSetcookie failed. Error: " << GetLastError();
   }
 
   virtual void OnAttachExternalTab(int tab_handle,
                                    intptr_t cookie,
                                    int disposition) {
     std::string url;
     url = StringPrintf("cf:attach_external_tab&%d&%d",
                        cookie, disposition);
-    OnOpenURL(tab_handle, GURL(url), disposition);
+    OnOpenURL(tab_handle, GURL(url), GURL(), disposition);
   }
 
   LRESULT OnCreate(UINT message, WPARAM wparam, LPARAM lparam,
                    BOOL& handled) {  // NO_LINT
     ModifyStyle(0, WS_CLIPCHILDREN | WS_CLIPSIBLINGS, 0);
     automation_client_->SetParentWindow(m_hWnd);
     // Only fire the 'interactive' ready state if we aren't there already.
     if (ready_state_ < READYSTATE_INTERACTIVE) {
       ready_state_ = READYSTATE_INTERACTIVE;
       FireOnChanged(DISPID_READYSTATE);
@@ skipping 46 matching lines @@
     std::string src_utf8;
     WideToUTF8(src, SysStringLen(src), &src_utf8);
     std::string full_url = ResolveURL(GetDocumentUrl(), src_utf8);
     if (full_url.empty()) {
       return E_INVALIDARG;
     }
 
     // We can initiate navigation here even if ready_state is not complete.
     // We do not have to set proxy, and AutomationClient will take care
     // of navigation just after CreateExternalTab is done.
-    if (!automation_client_->InitiateNavigation(full_url, is_privileged_)) {
+    if (!automation_client_->InitiateNavigation(full_url,
+                                                GetDocumentUrl(),
+                                                is_privileged_)) {
       // TODO(robertshield): Make InitiateNavigation return more useful
       // error information.
       return E_INVALIDARG;
     }
 
     // Save full URL in BSTR member
     url_.Reset(::SysAllocString(UTF8ToWide(full_url).c_str()));
 
     return S_OK;
   }
@@ skipping 360 matching lines @@
   EventHandlers onloaderror_;
   EventHandlers onload_;
   EventHandlers onreadystatechanged_;
   EventHandlers onprivatemessage_;
 
   // The UrlmonUrlRequest instance instantiated for downloading the base URL.
   scoped_refptr<CComObject<UrlmonUrlRequest> > base_url_request_;
 };
 
 #endif  // CHROME_FRAME_CHROME_FRAME_ACTIVEX_BASE_H_