Index: third_party/WebKit/Source/platform/network/ResourceRequest.cpp |
diff --git a/third_party/WebKit/Source/platform/network/ResourceRequest.cpp b/third_party/WebKit/Source/platform/network/ResourceRequest.cpp |
index 36014223a0e034e523beab8f9d8a2574753b2cee..24fa32ae594091785a8e681ad7b6d7243a493142 100644 |
--- a/third_party/WebKit/Source/platform/network/ResourceRequest.cpp |
+++ b/third_party/WebKit/Source/platform/network/ResourceRequest.cpp |
@@ -429,7 +429,10 @@ void ResourceRequest::initialize(const KURL& url) |
m_requestContext = WebURLRequest::RequestContextUnspecified; |
m_frameType = WebURLRequest::FrameTypeNone; |
m_fetchRequestMode = WebURLRequest::FetchRequestModeNoCORS; |
- m_fetchCredentialsMode = WebURLRequest::FetchCredentialsModeInclude; |
+ // Contrary to the Fetch spec, we default to same-origin mode here, and deal |
+ // with CORS modes in updateRequestForAccessControl if we're called in a |
+ // context which requires it. |
+ m_fetchCredentialsMode = WebURLRequest::FetchCredentialsModeSameOrigin; |
m_fetchRedirectMode = WebURLRequest::FetchRedirectModeFollow; |
m_referrerPolicy = ReferrerPolicyDefault; |
m_loFiState = WebURLRequest::LoFiUnspecified; |