Chromeframe user-agent without need of HttpNegotiate patch.

chrome_frame/chrome_active_document.cc

 // Copyright (c) 2010 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // Implementation of ChromeActiveDocument
 #include "chrome_frame/chrome_active_document.h"
 
 #include <hlink.h>
 #include <htiface.h>
 #include <initguid.h>
@@ skipping 246 matching lines @@
   // a window.open call from javascript, in which case the current IE tab
   // will attach to an existing ExternalTabContainer instance.
   bool is_new_navigation = true;
   bool is_chrome_protocol = false;
 
   if (!ParseUrl(url, &is_new_navigation, &is_chrome_protocol, &url)) {
     DLOG(WARNING) << __FUNCTION__ << " Failed to parse url:" << url;
     return E_INVALIDARG;
   }
 
-  const std::string& referrer = mgr ? mgr->referrer() : EmptyString();
+  std::string referrer = mgr ? mgr->referrer() : EmptyString();
+  // With CTransaction patch we have more robust way to grab the referrer for
+  // each top-level-switch-to-CF request by peeking at our sniffing data
+  // object that lives inside the bind context.
+  if (g_patch_helper.state() == PatchHelper::PATCH_PROTOCOL && info) {
+    scoped_refptr<ProtData> prot_data = info->get_prot_data();
+    if (prot_data)
+      referrer = prot_data->referrer();
+  }
+
   if (!LaunchUrl(url, referrer, is_new_navigation)) {
     NOTREACHED() << __FUNCTION__ << " Failed to launch url:" << url;
     return E_INVALIDARG;
   }
 
   if (!is_chrome_protocol)
     url_fetcher_.SetInfoForUrl(url, moniker_name, bind_context);
 
   THREAD_SAFE_UMA_HISTOGRAM_CUSTOM_COUNTS("ChromeFrame.FullTabLaunchType",
                                           is_chrome_protocol, 0, 1, 2);
@@ skipping 966 matching lines @@
                  shell_browser.Receive());
   DCHECK(shell_browser.get() != NULL);
   ScopedComPtr<ITridentService2> trident_services;
   trident_services.QueryFrom(shell_browser);
   if (trident_services)
     trident_services->FirePrivacyImpactedStateChange(wparam);
   else
     NOTREACHED() << "Failed to retrieve IWebBrowser2 interface.";
   return 0;
 }