Don't try to guess the referrer policy, but use the one associated with the request

content/renderer/fetchers/resource_fetcher_impl.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "content/renderer/fetchers/resource_fetcher_impl.h"
 
 #include "base/logging.h"
+#include "base/strings/string_util.h"
 #include "base/time/time.h"
 #include "third_party/WebKit/public/platform/Platform.h"
 #include "third_party/WebKit/public/platform/WebHTTPBody.h"
 #include "third_party/WebKit/public/platform/WebURL.h"
 #include "third_party/WebKit/public/platform/WebURLError.h"
 #include "third_party/WebKit/public/platform/WebURLLoader.h"
 #include "third_party/WebKit/public/platform/WebURLRequest.h"
 #include "third_party/WebKit/public/web/WebDocument.h"
 #include "third_party/WebKit/public/web/WebFrame.h"
 #include "third_party/WebKit/public/web/WebKit.h"
+#include "third_party/WebKit/public/web/WebSecurityPolicy.h"
 
 using base::TimeDelta;
 using blink::WebFrame;
 using blink::WebHTTPBody;
+using blink::WebSecurityPolicy;
 using blink::WebURLError;
 using blink::WebURLLoader;
 using blink::WebURLRequest;
 using blink::WebURLResponse;
 
 namespace content {
 
 // static
 ResourceFetcher* ResourceFetcher::Create(const GURL& url) {
   return new ResourceFetcherImpl(url);
@@ skipping 24 matching lines @@
   web_http_body.initialize();
   web_http_body.appendData(blink::WebData(body));
   request_.setHTTPBody(web_http_body);
 }
 
 void ResourceFetcherImpl::SetHeader(const std::string& header,
                                     const std::string& value) {
   DCHECK(!request_.isNull());
   DCHECK(!loader_);
 
-  request_.setHTTPHeaderField(blink::WebString::fromUTF8(header),
-                              blink::WebString::fromUTF8(value));
+  if (LowerCaseEqualsASCII(header, "referer")) {
+    blink::WebString referrer = WebSecurityPolicy::generateReferrerHeader(
+        blink::WebReferrerPolicyDefault,
+        request_.url(),
+        blink::WebString::fromUTF8(value));
+    request_.setHTTPReferrer(referrer, blink::WebReferrerPolicyDefault);
+  } else {
+    request_.setHTTPHeaderField(blink::WebString::fromUTF8(header),
+                                blink::WebString::fromUTF8(value));
+  }
 }
 
 void ResourceFetcherImpl::Start(WebFrame* frame,
                                 WebURLRequest::TargetType target_type,
                                 const Callback& callback) {
   DCHECK(!loader_);
   DCHECK(!request_.isNull());
   DCHECK(callback_.is_null());
   DCHECK(!completed_);
   if (!request_.httpBody().isNull())
@@ skipping 83 matching lines @@
 
 void ResourceFetcherImpl::didFail(WebURLLoader* loader,
                                   const WebURLError& error) {
   DCHECK(!completed_);
 
   // Go ahead and tell our delegate that we're done.
   RunCallback(WebURLResponse(), std::string());
 }
 
 }  // namespace content