To fix the cross-site post submission bug.

chrome/browser/ui/browser.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/ui/browser.h"
 
 #if defined(OS_WIN)
 #include <windows.h>
 #include <shellapi.h>
 #endif  // defined(OS_WIN)
@@ skipping 1280 matching lines @@
   nav_params.extra_headers = params.extra_headers;
   nav_params.disposition = params.disposition;
   nav_params.tabstrip_add_types = TabStripModel::ADD_NONE;
   nav_params.window_action = chrome::NavigateParams::SHOW_WINDOW;
   nav_params.user_gesture = true;
   nav_params.override_encoding = params.override_encoding;
   nav_params.is_renderer_initiated = params.is_renderer_initiated;
   nav_params.transferred_global_request_id =
       params.transferred_global_request_id;
   nav_params.is_cross_site_redirect = params.is_cross_site_redirect;
+
+  if (params.transition == content::PAGE_TRANSITION_FORM_SUBMIT) {
+    nav_params.browser_initiated_post_data = params.browser_initiated_post_data;

[Charlie Reis, 2012/11/20 05:46:03]

We used the "browser_initated_post_data" name before because it could only be
initiated from the browser process.  Maybe we should just change it to
post_data.

(I'd also like to look over the CL that introduced it again, since I seem to
remember it being dangerous if renderers could ever set it.  I'll have to see if
we've resolved those concerns.)

+  }
+
   chrome::Navigate(&nav_params);
 
   return nav_params.target_contents ?
       nav_params.target_contents->web_contents() : NULL;
 }
 
 void Browser::NavigationStateChanged(const WebContents* source,
                                      unsigned changed_flags) {
   // Only update the UI when something visible has changed.
   if (changed_flags)
@@ skipping 1035 matching lines @@
   if (contents && !allow_js_access) {
     contents->web_contents()->GetController().LoadURL(
         target_url,
         content::Referrer(),
         content::PAGE_TRANSITION_LINK,
         std::string());  // No extra headers.
   }
 
   return contents != NULL;
 }