To fix the cross-site post submission bug.

content/public/browser/navigation_entry.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CONTENT_PUBLIC_BROWSER_NAVIGATION_ENTRY_H_
 #define CONTENT_PUBLIC_BROWSER_NAVIGATION_ENTRY_H_
 
 #include <string>
 
-#include "base/memory/ref_counted_memory.h"
 #include "base/string16.h"
 #include "base/time.h"
 #include "content/common/content_export.h"
 #include "content/public/common/page_transition_types.h"
 #include "content/public/common/page_type.h"
 #include "content/public/common/referrer.h"
+#include "webkit/glue/resource_request_body.h"
 
 class GURL;
 
 namespace content {
 
 struct FaviconStatus;
 struct SSLStatus;
 
 // A NavigationEntry is a data structure that captures all the information
 // required to recreate a browsing state. This includes some opaque binary
@@ skipping 97 matching lines @@
   virtual const GURL& GetUserTypedURL() const = 0;
 
   // Post data is form data that was posted to get to this page. The data will
   // have to be reposted to reload the page properly. This flag indicates
   // whether the page had post data.
   //
   // The actual post data is stored either in
   // 1) browser_initiated_post_data when a new post data request is started.
   // 2) content_state when a post request has started and is extracted by
   //    WebKit to actually make the request.
+  //
+  // For the Cross-Process POST navigation, this flag is still true but
+  // the browser_initiated_post_data is pointed to an invalid address
+  // in the swapped-out process. Make sure to check the pointer before use it.
   virtual void SetHasPostData(bool has_post_data) = 0;
   virtual bool GetHasPostData() const = 0;
 
   // The Post identifier associated with the page.
   virtual void SetPostID(int64 post_id) = 0;
   virtual int64 GetPostID() const = 0;
 
   // Holds the raw post data of a browser initiated post request.
   // For efficiency, this should be cleared when content_state is populated
   // since the data is duplicated.
   // Note, this field:
   // 1) is not persisted in session restore.
   // 2) is shallow copied with the static copy Create method above.
   // 3) may be NULL so check before use.
   virtual void SetBrowserInitiatedPostData(
-      const base::RefCountedMemory* data) = 0;
-  virtual const base::RefCountedMemory* GetBrowserInitiatedPostData() const = 0;
+      scoped_refptr<webkit_glue::ResourceRequestBody> data) = 0;
+  virtual const scoped_refptr<webkit_glue::ResourceRequestBody>
+      GetBrowserInitiatedPostData() const = 0;
 
   // The favicon data and tracking information. See content::FaviconStatus.
   virtual const FaviconStatus& GetFavicon() const = 0;
   virtual FaviconStatus& GetFavicon() = 0;
 
   // All the SSL flags and state. See content::SSLStatus.
   virtual const SSLStatus& GetSSL() const = 0;
   virtual SSLStatus& GetSSL() = 0;
 
   // Store the URL that caused this NavigationEntry to be created.
@@ skipping 19 matching lines @@
 
   // Used to specify if this entry should be able to access local file://
   // resources.
   virtual void SetCanLoadLocalResources(bool allow) = 0;
   virtual bool GetCanLoadLocalResources() const = 0;
 };
 
 }  // namespace content
 
 #endif  // CONTENT_PUBLIC_BROWSER_NAVIGATION_ENTRY_H_