Add option to suppress HTTP Referer header.

net/http/http_network_transaction.cc

 // Copyright (c) 2010 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/http/http_network_transaction.h"
 
 #include "base/format_macros.h"
 #include "base/scoped_ptr.h"
 #include "base/compiler_specific.h"
 #include "base/field_trial.h"
@@ skipping 30 matching lines @@
 
 namespace net {
 
 namespace {
 
 void BuildRequestHeaders(const HttpRequestInfo* request_info,
                          const std::string& authorization_headers,
                          const UploadDataStream* upload_data_stream,
                          bool using_proxy,
                          std::string* request_headers) {
+  // Headers that will be stripped from request_info->extra_headers to prevent,
+  // e.g., plugins from overriding headers that are controlled using other
+  // means. Otherwise a plugin could set a referrer although sending the
+  // referrer is inhibited.
+  // TODO(jochen): check whether also other headers should be stripped.
+  static const char* const kExtraHeadersToBeStripped[] = {
+    "Referer"
+  };
+
   const std::string path = using_proxy ?
       HttpUtil::SpecForRequest(request_info->url) :
       HttpUtil::PathForRequest(request_info->url);
   *request_headers =
       StringPrintf("%s %s HTTP/1.1\r\nHost: %s\r\n",
                    request_info->method.c_str(), path.c_str(),
                    GetHostAndOptionalPort(request_info->url).c_str());
 
   // For compat with HTTP/1.0 servers and proxies:
   if (using_proxy)
@@ skipping 30 matching lines @@
   } else if (request_info->load_flags & LOAD_VALIDATE_CACHE) {
     *request_headers += "Cache-Control: max-age=0\r\n";
   }
 
   if (!authorization_headers.empty()) {
     *request_headers += authorization_headers;
   }
 
   // TODO(darin): Need to prune out duplicate headers.
 
-  *request_headers += request_info->extra_headers;
+  *request_headers += HttpUtil::StripHeaders(request_info->extra_headers,
+      kExtraHeadersToBeStripped, arraysize(kExtraHeadersToBeStripped));
   *request_headers += "\r\n";
 }
 
 // The HTTP CONNECT method for establishing a tunnel connection is documented
 // in draft-luotonen-web-proxy-tunneling-01.txt and RFC 2817, Sections 5.2 and
 // 5.3.
 void BuildTunnelRequest(const HttpRequestInfo* request_info,
                         const std::string& authorization_headers,
                         std::string* request_headers) {
   // RFC 2616 Section 9 says the Host request-header field MUST accompany all
@@ skipping 1754 matching lines @@
   AuthChallengeInfo* auth_info = new AuthChallengeInfo;
   auth_info->is_proxy = target == HttpAuth::AUTH_PROXY;
   auth_info->host_and_port = ASCIIToWide(GetHostAndPort(auth_origin));
   auth_info->scheme = ASCIIToWide(auth_handler_[target]->scheme());
   // TODO(eroman): decode realm according to RFC 2047.
   auth_info->realm = ASCIIToWide(auth_handler_[target]->realm());
   response_.auth_challenge = auth_info;
 }
 
 }  // namespace net