Remove URL fragment from referrer HTTP header when opening link using "Open Link in New Tab" option.

net/url_request/url_request_http_job.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/url_request/url_request_http_job.h"
 
 #include "base/base_switches.h"
 #include "base/bind.h"
 #include "base/bind_helpers.h"
 #include "base/command_line.h"
@@ skipping 850 matching lines @@
 
 void URLRequestHttpJob::SetExtraRequestHeaders(
     const HttpRequestHeaders& headers) {
   DCHECK(!transaction_.get()) << "cannot change once started";
   request_info_.extra_headers.CopyFrom(headers);
 }
 
 void URLRequestHttpJob::Start() {
   DCHECK(!transaction_.get());
 
   // Ensure that we do not send username and password fields in the referrer.

[pauljensen, 2013/03/15 21:50:00]

This comment doesn't make as much sense now that the code isn't calling
GetSanitizedReferrer().  I suggest changing it  to something like
"URLRequest::set_referrer() ensures we do not send..."

[mef, 2013/03/18 16:42:07]

Done.

-  GURL referrer(request_->GetSanitizedReferrer());
+  GURL referrer(request_->referrer());
 
   request_info_.url = request_->url();
   request_info_.method = request_->method();
   request_info_.load_flags = request_->load_flags();
   request_info_.priority = request_->priority();
   request_info_.request_id = request_->identifier();
 
   // Strip Referer from request_info_.extra_headers to prevent, e.g., plugins
   // from overriding headers that are controlled using other means. Otherwise a
   // plugin could set a referrer although sending the referrer is inhibited.
@@ skipping 693 matching lines @@
 
 void URLRequestHttpJob::NotifyURLRequestDestroyed() {
   awaiting_callback_ = false;
 }
 
 void URLRequestHttpJob::OnDetachRequest() {
   http_transaction_delegate_->OnDetachRequest();
 }
 
 }  // namespace net