Fix problems with PPB_URLLoader_Impl and PPAPITests.URLLoader.

webkit/plugins/ppapi/ppb_url_request_info_impl.cc

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "webkit/plugins/ppapi/ppb_url_request_info_impl.h"
 
 #include "base/logging.h"
 #include "base/string_util.h"
 #include "googleurl/src/gurl.h"
 #include "googleurl/src/url_util.h"
@@ skipping 364 matching lines @@
         DCHECK(!body_[i].data.empty());
         http_body.appendData(WebData(body_[i].data));
       }
     }
     web_request.setHTTPBody(http_body);
   }
 
   if (has_custom_referrer_url_) {
     if (!custom_referrer_url_.empty())
       frame->setReferrerForRequest(web_request, GURL(custom_referrer_url_));
-  } else {
-    frame->setReferrerForRequest(web_request, WebURL());  // Use default.
+  } else if (!allow_cross_origin_requests_) {
+    // Use default, except for cross-origin requests, since 'referer' is not
+    // whitelisted and will cause the request to fail.
+    frame->setReferrerForRequest(web_request, WebURL());
   }
 
   if (has_custom_content_transfer_encoding_) {
     if (!custom_content_transfer_encoding_.empty()) {
       web_request.addHTTPHeaderField(
           WebString::fromUTF8("Content-Transfer-Encoding"),
           WebString::fromUTF8(custom_content_transfer_encoding_));
     }
   }
 
   return web_request;
 }
 
 bool PPB_URLRequestInfo_Impl::RequiresUniversalAccess() const {
   return has_custom_referrer_url_ || has_custom_content_transfer_encoding_;
 }
 
 }  // namespace ppapi
 }  // namespace webkit