CORS-RFC1918: Teach ResourceRequest about "external" requests

third_party/WebKit/Source/modules/fetch/FetchManager.cpp

Index: third_party/WebKit/Source/modules/fetch/FetchManager.cpp
diff --git a/third_party/WebKit/Source/modules/fetch/FetchManager.cpp b/third_party/WebKit/Source/modules/fetch/FetchManager.cpp
index a2feca286d4fac6b90ebd11df2fe58138934cb6c..cc9d3e81905d6f6a634ece0cc0298ccb42185db9 100644
--- a/third_party/WebKit/Source/modules/fetch/FetchManager.cpp
+++ b/third_party/WebKit/Source/modules/fetch/FetchManager.cpp
@@ -538,6 +538,7 @@ void FetchManager::Loader::performHTTPFetch(bool corsFlag, bool corsPreflightFla
     }
     request.setFetchRedirectMode(m_request->redirect());
     request.setUseStreamOnResponse(true);
+    request.setIsExternalRequest(executionContext()->securityContext().isHostedInReservedIPRange());
 
     // "2. Append `Referer`/empty byte sequence, if |HTTPRequest|'s |referrer|
     // is none, and `Referer`/|HTTPRequest|'s referrer, serialized and utf-8
@@ -633,6 +634,7 @@ void FetchManager::Loader::performDataFetch()
     request.setUseStreamOnResponse(true);
     request.setHTTPMethod(m_request->method());
     request.setFetchRedirectMode(WebURLRequest::FetchRedirectModeError);
+    // We intentionally skip 'setIsExternalRequest', as 'data:' can never be external.
 
     ResourceLoaderOptions resourceLoaderOptions;
     resourceLoaderOptions.dataBufferingPolicy = DoNotBufferData;