Resource requests from Save-Page-As should go through CanRequestURL checks.

content/browser/download/save_item.h

Index: content/browser/download/save_item.h
diff --git a/content/browser/download/save_item.h b/content/browser/download/save_item.h
index 15b5495ba2edf4d4309882a217a2c3af62dbafd3..049c7f3936a7a6a023904d409dc31a5661b743a7 100644
--- a/content/browser/download/save_item.h
+++ b/content/browser/download/save_item.h
@@ -31,7 +31,8 @@ class SaveItem {
            const Referrer& referrer,
            SavePackage* package,
            SaveFileCreateInfo::SaveFileSource save_source,
-           int frame_tree_node_id);
+           int frame_tree_node_id,
+           int container_frame_tree_node_id);
 
   ~SaveItem();
 
@@ -58,6 +59,9 @@ class SaveItem {
   const GURL& url() const { return url_; }
   const Referrer& referrer() const { return referrer_; }
   int frame_tree_node_id() const { return frame_tree_node_id_; }
+  int container_frame_tree_node_id() const {
+    return container_frame_tree_node_id_;
+  }
   int64_t received_bytes() const { return received_bytes_; }
   bool has_final_name() const { return !full_path_.empty(); }
   bool success() const { return is_success_; }
@@ -80,9 +84,14 @@ class SaveItem {
   Referrer referrer_;
 
   // Frame tree node id, if this save item represents a frame
-  // (otherwise FrameTreeNode::kFrameTreeNodeInvalidID).
+  // (otherwise FrameTreeNode::kFrameTreeNodeInvalidId).
   int frame_tree_node_id_;
 
+  // Frame tree node id of the frame containing this save item.
+  // (FrameTreeNode::kFrameTreeNodeInvalidId if this save item represents the
+  // main frame, which obviously doesn't have a containing/parent frame).
+  int container_frame_tree_node_id_;
+
   // Total bytes expected.
   int64_t total_bytes_;