Treat files downloaded from the address bar as "always safe" (including extensions per discussion...

webkit/glue/resource_loader_bridge.h

Index: webkit/glue/resource_loader_bridge.h
===================================================================
--- webkit/glue/resource_loader_bridge.h	(revision 97032)
+++ webkit/glue/resource_loader_bridge.h	(working copy)
@@ -30,6 +30,7 @@
 #include "base/platform_file.h"
 #include "base/time.h"
 #include "base/values.h"
+#include "content/common/page_transition_types.h"

[darin (slow to review), 2011/08/18 04:21:01]

i see...

hmm, it certainly seems a bit wrong for this layer to need to know anything
about whether the request was initiated by typing in the omnibox.  we probably
do want to think about some way to push this through transparently. 
hmmmmmmmm...

[Peter Kasting, 2011/08/18 19:47:36]

I'm happy to do the gruntwork of whatever the right change is, but as I'm
touching classes here that I know nothing about, I'm not sure how to figure out
what should actually be done :).  Perhaps either you can think of something, or
direct me to someone with whom I should discuss this stuff?

 #include "googleurl/src/gurl.h"
 #include "net/base/host_port_pair.h"
 #include "net/url_request/url_request_status.h"
@@ -253,6 +254,8 @@
     // Identifies the frame within the RenderView that sent the request.
     // -1 if unknown / invalid.
     int64 frame_id;
+
+    PageTransition::Type transition_type;
   };
 
   // See the SyncLoad method declared below.  (The name of this struct is not