When a user logs into sync, the appropriate cookies are retrieved so that

chrome/common/net/gaia/gaia_urls.cc

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/common/net/gaia/gaia_urls.h"
 
 #include "base/command_line.h"
 #include "chrome/common/chrome_switches.h"
 
 namespace {
 
 const char kDefaultGaiaBaseUrl[] = "www.google.com";
 const char kCaptchaUrlPrefixSuffix[] = "/accounts/";
 const char kClientLoginUrlSuffix[] = "/accounts/ClientLogin";
 const char kIssueAuthTokenUrlSuffix[] = "/accounts/IssueAuthToken";
 const char kGetUserInfoUrlSuffix[] = "/accounts/GetUserInfo";
-// TODO(cmasone): make sure that using an http:// URL in the "continue"
-// parameter here doesn't open the system up to attack long-term.
-const char kTokenAuthUrlSuffix[] =
-    "/accounts/TokenAuth?"
-    "continue=http://www.google.com/webhp&source=chromeos&auth=";
+const char kTokenAuthUrlSuffix[] = "/accounts/TokenAuth";
 
 }  // namespacce
 
 GaiaUrls* GaiaUrls::GetInstance() {
   return Singleton<GaiaUrls>::get();
 }
 
 GaiaUrls::GaiaUrls() {
   CommandLine* command_line = CommandLine::ForCurrentProcess();
   if (command_line->HasSwitch(switches::kGaiaHost)) {
@@ skipping 24 matching lines @@
   return issue_auth_token_url_;
 }
 
 const std::string& GaiaUrls::get_user_info_url() {
   return get_user_info_url_;
 }
 
 const std::string& GaiaUrls::token_auth_url() {
   return token_auth_url_;
 }