PPB_Flash.Navigate(): Disallow certain HTTP request headers.

chrome/renderer/pepper/pepper_flash_renderer_host.h

Index: chrome/renderer/pepper/pepper_flash_renderer_host.h
diff --git a/chrome/renderer/pepper/pepper_flash_renderer_host.h b/chrome/renderer/pepper/pepper_flash_renderer_host.h
index 0e30dece792f06335f6f02c2d2e6bf907b4e38f7..e74830bdb4c5be813042410bddbc5863b2a6bdc4 100644
--- a/chrome/renderer/pepper/pepper_flash_renderer_host.h
+++ b/chrome/renderer/pepper/pepper_flash_renderer_host.h
@@ -5,6 +5,7 @@
 #ifndef CHROME_RENDERER_PEPPER_PEPPER_FLASH_RENDERER_HOST_H_
 #define CHROME_RENDERER_PEPPER_PEPPER_FLASH_RENDERER_HOST_H_
 
+#include <set>
 #include <string>
 #include <vector>
 
@@ -61,6 +62,9 @@ class PepperFlashRendererHost : public ppapi::host::ResourceHost {
   // yet been replied to.
   std::vector<ppapi::host::ReplyMessageContext> navigate_replies_;
 
+  // A set of HTTP request headers allowed for Navigate().
+  std::set<std::string> allowed_headers_;
+
   content::RendererPpapiHost* host_;
   base::WeakPtrFactory<PepperFlashRendererHost> weak_factory_;