To fix the cross-site post submission bug.

content/public/browser/navigation_controller.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CONTENT_PUBLIC_BROWSER_NAVIGATION_CONTROLLER_H_
 #define CONTENT_PUBLIC_BROWSER_NAVIGATION_CONTROLLER_H_
 
 #include <map>
 #include <string>
 #include <vector>
 
-#include "base/memory/ref_counted.h"
 #include "base/string16.h"
 #include "content/common/content_export.h"
 #include "content/public/browser/global_request_id.h"
 #include "content/public/common/page_transition_types.h"
 #include "content/public/common/referrer.h"
 #include "googleurl/src/gurl.h"
-
-namespace base {
-
-class RefCountedMemory;
-
-}  // namespace base
+#include "webkit/glue/resource_request_body.h"
 
 namespace content {
 
 class BrowserContext;
 class NavigationEntry;
 class SessionStorageNamespace;
 class WebContents;
 
 // Used to store the mapping of a StoragePartition id to
 // SessionStorageNamespace.
@@ skipping 104 matching lines @@
     // for pages loaded via data URLs.
     GURL base_url_for_data_url;
 
     // Used in LOAD_TYPE_DATA loads only. URL displayed to the user for
     // data loads.
     GURL virtual_url_for_data_url;
 
     // Used in LOAD_TYPE_BROWSER_INITIATED_HTTP_POST loads only. Carries the
     // post data of the load. Ownership is transferred to NavigationController
     // after LoadURLWithParams call.
-    scoped_refptr<base::RefCountedMemory> browser_initiated_post_data;
+    scoped_refptr<webkit_glue::ResourceRequestBody> browser_initiated_post_data;

[irobert, 2012/11/09 19:07:57]

We decide not to use base::RefCountedMemory* anymore since it only deals with
DataType. We use ResourceRequestBody instead with can support all kinds of data
type for POST submission.

We found out that this browser_initiated_post_data member is introduced for the
API loadURL in WebView, which allow Android application load a POST submission
navigation to WebView. And the assumption is this POST submission initiated by
the Android can only be DataType.

 
     // True if this URL should be able to access local resources.
     bool can_load_local_resources;
 
     explicit LoadURLParams(const GURL& url);
     ~LoadURLParams();
 
     // Allows copying of LoadURLParams struct.
     LoadURLParams(const LoadURLParams& other);
     LoadURLParams& operator=(const LoadURLParams& other);
@@ skipping 211 matching lines @@
   virtual void CopyStateFromAndPrune(NavigationController* source) = 0;
 
   // Removes all the entries except the active entry. If there is a new pending
   // navigation it is preserved.
   virtual void PruneAllButActive() = 0;
 };
 
 }  // namespace content
 
 #endif  // CONTENT_PUBLIC_BROWSER_NAVIGATION_CONTROLLER_H_