To fix the cross-site post submission bug.

content/public/browser/navigation_controller.h

Index: content/public/browser/navigation_controller.h
diff --git a/content/public/browser/navigation_controller.h b/content/public/browser/navigation_controller.h
index 8a64d4875c4f4f4eb546f3dfe80e8a7d076649a4..afe0718ee928d43c78f49d6eace5d404fcd76f49 100644
--- a/content/public/browser/navigation_controller.h
+++ b/content/public/browser/navigation_controller.h
@@ -9,19 +9,13 @@
 #include <string>
 #include <vector>
 
-#include "base/memory/ref_counted.h"
 #include "base/string16.h"
 #include "content/common/content_export.h"
 #include "content/public/browser/global_request_id.h"
 #include "content/public/common/page_transition_types.h"
 #include "content/public/common/referrer.h"
 #include "googleurl/src/gurl.h"
-
-namespace base {
-
-class RefCountedMemory;
-
-}  // namespace base
+#include "webkit/glue/resource_request_body.h"
 
 namespace content {
 
@@ -146,7 +140,7 @@ class NavigationController {
     // Used in LOAD_TYPE_BROWSER_INITIATED_HTTP_POST loads only. Carries the
     // post data of the load. Ownership is transferred to NavigationController
     // after LoadURLWithParams call.
-    scoped_refptr<base::RefCountedMemory> browser_initiated_post_data;
+    scoped_refptr<webkit_glue::ResourceRequestBody> browser_initiated_post_data;

[irobert, 2012/11/09 19:07:57]

We decide not to use base::RefCountedMemory* anymore since it only deals with
DataType. We use ResourceRequestBody instead with can support all kinds of data
type for POST submission.

We found out that this browser_initiated_post_data member is introduced for the
API loadURL in WebView, which allow Android application load a POST submission
navigation to WebView. And the assumption is this POST submission initiated by
the Android can only be DataType.

 
     // True if this URL should be able to access local resources.
     bool can_load_local_resources;