Index: content/browser/renderer_host/render_view_host.cc |
diff --git a/content/browser/renderer_host/render_view_host.cc b/content/browser/renderer_host/render_view_host.cc |
index 69bdae5505171d0f9a1811f3a952adadd3e4d8d1..ee0da720dcc10c976c04088f2b18132d58eeb319 100644 |
--- a/content/browser/renderer_host/render_view_host.cc |
+++ b/content/browser/renderer_host/render_view_host.cc |
@@ -896,7 +896,7 @@ void RenderViewHost::OnMsgNavigate(const IPC::Message& msg) { |
// the URL. To prevent this attack, we block the renderer from inserting |
// banned URLs into the navigation controller in the first place. |
FilterURL(policy, renderer_id, &validated_params.url); |
- FilterURL(policy, renderer_id, &validated_params.referrer); |
+ FilterURL(policy, renderer_id, &validated_params.referrer.url); |
for (std::vector<GURL>::iterator it(validated_params.redirects.begin()); |
it != validated_params.redirects.end(); ++it) { |
FilterURL(policy, renderer_id, &(*it)); |
@@ -1007,7 +1007,7 @@ void RenderViewHost::OnMsgToggleFullscreen(bool enter_fullscreen) { |
} |
void RenderViewHost::OnMsgOpenURL(const GURL& url, |
- const GURL& referrer, |
+ const content::Referrer& referrer, |
WindowOpenDisposition disposition, |
int64 source_frame_id) { |
GURL validated_url(url); |