This fixes the following bugs:-...

webkit/glue/webplugin_impl.cc

 // Copyright (c) 2006-2008 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "config.h"
 
 #pragma warning(push, 0)
 #include "Document.h"
 #include "Element.h"
 #include "Event.h"
@@ skipping 219 matching lines @@
 }
 
 WebCore::Widget* WebPluginImpl::Create(const GURL& url,
                                        char** argn,
                                        char** argv,
                                        int argc,
                                        WebCore::Element *element,
                                        WebFrameImpl *frame,
                                        WebPluginDelegate* delegate,
                                        bool load_manually) {
-  WebPluginImpl* webplugin = new WebPluginImpl(element, frame, delegate);
+  WebPluginImpl* webplugin = new WebPluginImpl(element, frame, delegate, url);
 
   if (!delegate->Initialize(url, argn, argv, argc, webplugin, load_manually)) {
     delegate->PluginDestroyed();
     delegate = NULL;
     delete webplugin;
     return NULL;
   }
 
   WebPluginContainer* container = new WebPluginContainer(webplugin);
   webplugin->SetContainer(container);
   return container;
 }
 
 WebPluginImpl::WebPluginImpl(WebCore::Element* element,
                              WebFrameImpl* webframe,
-                             WebPluginDelegate* delegate)
+                             WebPluginDelegate* delegate,
+                             const GURL& plugin_url)
     : element_(element),
       webframe_(webframe),
       delegate_(delegate),
       windowless_(false),
       window_(NULL),
       force_geometry_update_(false),
       visible_(false),
       widget_(NULL),
-      received_first_paint_notification_(false) {
+      received_first_paint_notification_(false),
+      plugin_url_(plugin_url) {
 }
 
 WebPluginImpl::~WebPluginImpl() {
 }
 
 void WebPluginImpl::SetWindow(HWND window, HANDLE pump_messages_event) {
   if (window) {
     DCHECK(!windowless_);  // Make sure not called twice.
     window_ = window;
   } else {
@@ skipping 811 matching lines @@
   info.client = client;
   info.request.setFrame(frame());
   info.request.setURL(webkit_glue::GURLToKURL(complete_url_string));
   info.request.setOriginPid(delegate_->GetProcessId());
   info.request.setResourceType(ResourceType::OBJECT);
   info.request.setHTTPMethod(method);
 
   if (range_info)
     info.request.addHTTPHeaderField("Range", range_info);
 
-  const WebCore::String& referrer = frame()->loader()->outgoingReferrer();
+  WebCore::String referrer;
+  // If the plugin is instantiated without a SRC URL, then use the
+  // containing frame URL as the referrer.
+  if (plugin_url_.spec().empty()) {
+    referrer = frame()->loader()->outgoingReferrer();
+  } else {
+    referrer = webkit_glue::StdStringToString(plugin_url_.spec());
+  }
+
   if (!WebCore::FrameLoader::shouldHideReferrer(
           complete_url_string.spec().c_str(), referrer)) {
     info.request.setHTTPReferrer(referrer);
   }
 
   if (lstrcmpA(method, "POST") == 0) {
     // Adds headers or form data to a request.  This must be called before
     // we initiate the actual request.
     SetPostData(&info.request, buf, buf_len);
   }
@@ skipping 41 matching lines @@
 
   MultiPartResponseClient* multi_part_response_client =
       new MultiPartResponseClient(client);
 
   MultipartResponseDelegate* multi_part_response_handler = 
       new MultipartResponseDelegate(multi_part_response_client, NULL, 
                                     response, 
                                     multipart_boundary);
   multi_part_response_map_[client] = multi_part_response_handler;
 }