To fix the cross-site post submission bug.

content/renderer/render_view_impl.h

Index: content/renderer/render_view_impl.h
diff --git a/content/renderer/render_view_impl.h b/content/renderer/render_view_impl.h
index f15fa740b578bd7b5eb93fdc0f5854c518828c51..53c7f84ea83c52c661b2197fdf8ab2f74d189bb1 100644
--- a/content/renderer/render_view_impl.h
+++ b/content/renderer/render_view_impl.h
@@ -46,6 +46,7 @@
 #include "third_party/WebKit/Source/WebKit/chromium/public/platform/WebFileSystem.h"
 #include "third_party/WebKit/Source/WebKit/chromium/public/platform/WebGraphicsContext3D.h"
 #include "ui/surface/transport_dib.h"
+#include "webkit/glue/resource_request_body.h"
 #include "webkit/glue/webpreferences.h"
 #include "webkit/media/webmediaplayer_delegate.h"
 #include "webkit/plugins/npapi/webplugin_page_delegate.h"
@@ -852,7 +853,9 @@ class CONTENT_EXPORT RenderViewImpl
   void OpenURL(WebKit::WebFrame* frame,
                const GURL& url,
                const Referrer& referrer,
-               WebKit::WebNavigationPolicy policy);
+               WebKit::WebNavigationPolicy policy,
+               std::string extra_header,

[irobert, 2012/11/19 19:56:31]

If we save the POST data in the navigation_state or document_state, we can avoid
changing this API.

[Charlie Reis, 2012/11/20 05:46:03]

But those aren't sent to the browser process, are they?  And content_state
doesn't get sent at the same time.

[irobert, 2012/11/22 01:37:00]

Like what we have done for Cross-Process redirect navigation. We can retrieve
the POST data from navigation_state and pass it to ViewHostMsg_OpenURL_Params.

On 2012/11/20 05:46:03, creis wrote:

+               scoped_refptr<webkit_glue::ResourceRequestBody> request_body);
 
   bool RunJavaScriptMessage(JavaScriptMessageType type,
                             const string16& message,