Modify the "dangerous download" algorithm as follows. Original patch by Pier...

webkit/glue/resource_loader_bridge.h

 // Copyright (c) 2006-2008 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 //
 // The intent of this file is to provide a type-neutral abstraction between
 // Chrome and WebKit for resource loading. This pure-virtual interface is
 // implemented by the embedder, which also provides a factory method Create
 // to instantiate this object.
 //
 // One of these objects will be created by WebKit for each request. WebKit
@@ skipping 218 matching lines @@
 
     // Identifies what appcache host this request is associated with.
     int appcache_host_id;
 
     // Used to associated the bridge with a frame's network context.
     int routing_id;
 
     // If true, then the response body will be downloaded to a file and the
     // path to that file will be provided in ResponseInfo::download_file_path.
     bool download_to_file;
+
+    // True if the request was user initiated.
+    bool has_user_gesture;
   };
 
   // See the SyncLoad method declared below.  (The name of this struct is not
   // suffixed with "Info" because it also contains the response data.)
   struct SyncLoadResponse : ResourceResponseInfo {
     SyncLoadResponse();
     ~SyncLoadResponse();
 
     // The response status.
     URLRequestStatus status;
@@ skipping 125 matching lines @@
   // construction must go through Create()
   ResourceLoaderBridge();
 
  private:
   DISALLOW_COPY_AND_ASSIGN(ResourceLoaderBridge);
 };
 
 }  // namespace webkit_glue
 
 #endif  // WEBKIT_GLUE_RESOURCE_LOADER_BRIDGE_H_