Hardening the 'url::Origin' implementation.

net/url_request/url_request.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/url_request/url_request.h"
 
 #include "base/bind.h"
 #include "base/bind_helpers.h"
 #include "base/callback.h"
 #include "base/compiler_specific.h"
@@ skipping 935 matching lines @@
   // "null." This matches Firefox and IE behavior, although it supercedes the
   // suggested behavior in RFC 6454, "The Web Origin Concept."
   //
   // See also https://crbug.com/465517.
   //
   // TODO(jww): This is probably layering violation and should be refactored
   // into //content. See https://crbug.com/471397.
   if (redirect_info.new_url.GetOrigin() != url().GetOrigin() &&
       extra_request_headers_.HasHeader(HttpRequestHeaders::kOrigin)) {
     extra_request_headers_.SetHeader(HttpRequestHeaders::kOrigin,
-                                     url::Origin().string());
+                                     url::kUniqueOriginSerialization);
   }
 
   referrer_ = redirect_info.new_referrer;
   first_party_for_cookies_ = redirect_info.new_first_party_for_cookies;
 
   url_chain_.push_back(redirect_info.new_url);
   --redirect_limit_;
 
   Start();
   return OK;
@@ skipping 223 matching lines @@
 }
 
 void URLRequest::GetConnectionAttempts(ConnectionAttempts* out) const {
   if (job_)
     job_->GetConnectionAttempts(out);
   else
     out->clear();
 }
 
 }  // namespace net