When cross-site navigations are cancelled, delete the request being transferred

content/browser/loader/cross_site_resource_handler.h

Index: content/browser/loader/cross_site_resource_handler.h
===================================================================
--- content/browser/loader/cross_site_resource_handler.h	(revision 250813)
+++ content/browser/loader/cross_site_resource_handler.h	(working copy)
@@ -7,6 +7,7 @@
 
 #include "base/memory/ref_counted.h"
 #include "content/browser/loader/layered_resource_handler.h"
+#include "content/common/content_export.h"
 #include "net/url_request/url_request_status.h"
 
 namespace net {
@@ -46,6 +47,16 @@
   // WebContentsImpl to swap in the new renderer and destroy the old one.
   void ResumeResponse();
 
+  // In the case that the request is being transferred and the cross-site
+  // navigation is cancelled, cancels and deletes the request.  This is needed
+  // to avoid leaking the request.
+  void AbortTransfer();
+
+  // When set to true, requests are leaked when they can't be passed to a
+  // RenderViewHost, for unit tests.
+  CONTENT_EXPORT static void SetLeakRequestsForTesting(
+      bool leak_requests_for_testing);
+
  private:
   // Prepare to render the cross-site response in a new RenderViewHost, by
   // telling the old RenderViewHost to run its onunload handler.