Cross origin requests to same origin should match

third_party/WebKit/Source/core/loader/LinkLoader.cpp

 /*
  * Copyright (C) 2011 Google Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions are
  * met:
  *
  *     * Redistributions of source code must retain the above copyright
  * notice, this list of conditions and the following disclaimer.
  *     * Redistributions in binary form must reproduce the above
@@ skipping 259 matching lines @@
 
     if (!isSupportedType(resourceType, mimeType)) {
         document.addConsoleMessage(ConsoleMessage::create(OtherMessageSource, WarningMessageLevel, String("<link rel=preload> has an unsupported `type` value")));
         return nullptr;
     }
     ResourceRequest resourceRequest(document.completeURL(href));
     ResourceFetcher::determineRequestContext(resourceRequest, resourceType, false);
     FetchRequest linkRequest(resourceRequest, FetchInitiatorTypeNames::link);
 
     linkRequest.setPriority(document.fetcher()->loadPriority(resourceType, linkRequest));
-    if (crossOrigin != CrossOriginAttributeNotSet)
-        linkRequest.setCrossOriginAccessControl(document.getSecurityOrigin(), crossOrigin);
+    linkRequest.setCrossOriginAccessControl(document.getSecurityOrigin(), crossOrigin);
     Settings* settings = document.settings();
     if (settings && settings->logPreload())
         document.addConsoleMessage(ConsoleMessage::create(OtherMessageSource, DebugMessageLevel, String("Preload triggered for " + href.host() + href.path())));
     linkRequest.setForPreload(true);
     linkRequest.setLinkPreload(true);
     return document.loader()->startPreload(resourceType, linkRequest);
 }
 
 bool LinkLoader::loadLinkFromHeader(const String& headerValue, const KURL& baseURL, Document* document, const NetworkHintsInterface& networkHintsInterface, CanLoadResources canLoadResources)
 {
@@ skipping 42 matching lines @@
     if (href.isEmpty() || !href.isValid())
         released();
 
     // FIXME(crbug.com/323096): Should take care of import.
     if (relAttribute.isLinkPrefetch() && href.isValid() && document.frame()) {
         if (!m_client->shouldLoadLink())
             return false;
         UseCounter::count(document, UseCounter::LinkRelPrefetch);
 
         FetchRequest linkRequest(ResourceRequest(document.completeURL(href)), FetchInitiatorTypeNames::link);
-        if (crossOrigin != CrossOriginAttributeNotSet)
-            linkRequest.setCrossOriginAccessControl(document.getSecurityOrigin(), crossOrigin);
+        linkRequest.setCrossOriginAccessControl(document.getSecurityOrigin(), crossOrigin);
         setResource(LinkFetchResource::fetch(Resource::LinkPrefetch, linkRequest, document.fetcher()));
     }
 
     if (const unsigned prerenderRelTypes = prerenderRelTypesFromRelAttribute(relAttribute, document)) {
         if (!m_prerender) {
             m_prerender = PrerenderHandle::create(document, this, href, prerenderRelTypes);
         } else if (m_prerender->url() != href) {
             m_prerender->cancel();
             m_prerender = PrerenderHandle::create(document, this, href, prerenderRelTypes);
         }
@@ skipping 19 matching lines @@
 
 DEFINE_TRACE(LinkLoader)
 {
     visitor->trace(m_client);
     visitor->trace(m_prerender);
     visitor->trace(m_linkPreloadResourceClient);
     ResourceOwner<Resource, ResourceClient>::trace(visitor);
 }
 
 } // namespace blink