Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(175)

Side by Side Diff: Source/core/html/parser/PreloadRequest.cpp

Issue 1235563004: Apply meta tag referrer policy for preloaded requests (Closed) Base URL: https://chromium.googlesource.com/chromium/blink.git@master
Patch Set: style fix Created 5 years, 5 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch
« no previous file with comments | « Source/core/html/parser/PreloadRequest.h ('k') | Source/platform/weborigin/SecurityPolicy.h » ('j') | no next file with comments »
Toggle Intra-line Diffs ('i') | Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
OLDNEW
1 // Copyright 2015 The Chromium Authors. All rights reserved. 1 // Copyright 2015 The Chromium Authors. All rights reserved.
2 // Use of this source code is governed by a BSD-style license that can be 2 // Use of this source code is governed by a BSD-style license that can be
3 // found in the LICENSE file. 3 // found in the LICENSE file.
4 4
5 #include "config.h" 5 #include "config.h"
6 #include "core/html/parser/PreloadRequest.h" 6 #include "core/html/parser/PreloadRequest.h"
7 7
8 #include "core/dom/Document.h" 8 #include "core/dom/Document.h"
9 #include "core/fetch/FetchInitiatorInfo.h" 9 #include "core/fetch/FetchInitiatorInfo.h"
10 10
(...skipping 11 matching lines...) Expand all
22 { 22 {
23 return document->completeURLWithOverride(m_resourceURL, m_baseURL.isEmpty() ? document->url() : m_baseURL); 23 return document->completeURLWithOverride(m_resourceURL, m_baseURL.isEmpty() ? document->url() : m_baseURL);
24 } 24 }
25 25
26 FetchRequest PreloadRequest::resourceRequest(Document* document) 26 FetchRequest PreloadRequest::resourceRequest(Document* document)
27 { 27 {
28 ASSERT(isMainThread()); 28 ASSERT(isMainThread());
29 FetchInitiatorInfo initiatorInfo; 29 FetchInitiatorInfo initiatorInfo;
30 initiatorInfo.name = AtomicString(m_initiatorName); 30 initiatorInfo.name = AtomicString(m_initiatorName);
31 initiatorInfo.position = m_initiatorPosition; 31 initiatorInfo.position = m_initiatorPosition;
32 FetchRequest request(ResourceRequest(completeURL(document)), initiatorInfo); 32 ResourceRequest resourceRequest(completeURL(document));
33 resourceRequest.setHTTPReferrer(SecurityPolicy::generateReferrer(m_referrerP olicy, resourceRequest.url(), document->outgoingReferrer()));
34 FetchRequest request(resourceRequest, initiatorInfo);
33 35
34 if (m_resourceType == Resource::ImportResource) { 36 if (m_resourceType == Resource::ImportResource) {
35 SecurityOrigin* securityOrigin = document->contextDocument()->securityOr igin(); 37 SecurityOrigin* securityOrigin = document->contextDocument()->securityOr igin();
36 bool sameOrigin = securityOrigin->canRequest(request.url()); 38 bool sameOrigin = securityOrigin->canRequest(request.url());
37 request.setCrossOriginAccessControl(securityOrigin, 39 request.setCrossOriginAccessControl(securityOrigin,
38 sameOrigin ? AllowStoredCredentials : DoNotAllowStoredCredentials, 40 sameOrigin ? AllowStoredCredentials : DoNotAllowStoredCredentials,
39 ClientDidNotRequestCredentials); 41 ClientDidNotRequestCredentials);
40 } 42 }
41 43
42 if (m_isCORSEnabled) 44 if (m_isCORSEnabled)
43 request.setCrossOriginAccessControl(document->securityOrigin(), m_allowC redentials); 45 request.setCrossOriginAccessControl(document->securityOrigin(), m_allowC redentials);
44 46
45 request.setDefer(m_defer); 47 request.setDefer(m_defer);
46 request.setResourceWidth(m_resourceWidth); 48 request.setResourceWidth(m_resourceWidth);
47 request.setClientHintsPreferences(m_clientHintsPreferences); 49 request.setClientHintsPreferences(m_clientHintsPreferences);
48 50
49 return request; 51 return request;
50 } 52 }
51 53
52 } 54 }
OLDNEW
« no previous file with comments | « Source/core/html/parser/PreloadRequest.h ('k') | Source/platform/weborigin/SecurityPolicy.h » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698