Revert cross-origin auth prompt blocking.

content/browser/loader/resource_dispatcher_host_impl.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // See http://dev.chromium.org/developers/design-documents/multi-process-resource-loading
 
 #include "content/browser/loader/resource_dispatcher_host_impl.h"
 
 #include <set>
 #include <vector>
@@ skipping 625 matching lines @@
   // Prevent third-party content from prompting for login, unless it is
   // a proxy that is trying to authenticate.  This is often the foundation
   // of a scam to extract credentials for another domain from the user.
   if (!auth_info->is_proxy) {
     HttpAuthResourceType resource_type =
         HttpAuthResourceTypeOf(loader->request());
     UMA_HISTOGRAM_ENUMERATION("Net.HttpAuthResource",
                               resource_type,
                               HTTP_AUTH_RESOURCE_LAST);
 
-    if (resource_type == HTTP_AUTH_RESOURCE_BLOCKED_CROSS)
-      return false;
+    // TODO(tsepez): someday return false on HTTP_AUTH_RESOURCE_BLOCKED_CROSS,
+    // but not now since the issues in http://crbug.com/174129 keep getting

[Charlie Reis, 2013/02/04 23:31:40]

This took me a while to understand.  Can you say a little more about what would
need to be fixed to put this check back in?

My understanding is that this was added for http://crbug.com/81251 to try to
prevent third parties from invoking HTTP basic authentication, but that this
check somehow introduced problems of its own.

+    // re-introduced.
   }
 
   return true;
 }
 
 bool ResourceDispatcherHostImpl::AcceptSSLClientCertificateRequest(
     ResourceLoader* loader,
     net::SSLCertRequestInfo* cert_info) {
   if (delegate_ && !delegate_->AcceptSSLClientCertificateRequest(
           loader->request(), cert_info)) {
@@ skipping 1074 matching lines @@
 
   return i->second.get();
 }
 
 ResourceLoader* ResourceDispatcherHostImpl::GetLoader(int child_id,
                                                       int request_id) const {
   return GetLoader(GlobalRequestID(child_id, request_id));
 }
 
 }  // namespace content