SameSite: Correctly set requests' initiator for new tabs.

third_party/WebKit/Source/core/loader/FrameFetchContext.cpp

 /*
  * Copyright (C) 2013 Google Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions are
  * met:
  *
  *     * Redistributions of source code must retain the above copyright
  * notice, this list of conditions and the following disclaimer.
  *     * Redistributions in binary form must reproduce the above
@@ skipping 709 matching lines @@
 void FrameFetchContext::addCSPHeaderIfNecessary(Resource::Type type, FetchRequest& fetchRequest)
 {
     if (!m_document)
         return;
 
     const ContentSecurityPolicy* csp = m_document->contentSecurityPolicy();
     if (csp->shouldSendCSPHeader(type))
         fetchRequest.mutableResourceRequest().addHTTPHeaderField("CSP", "active");
 }
 
+void FrameFetchContext::populateRequestorDataIfNecessary(ResourceRequest& request)
+{
+    if (!m_document)
+        return;
+
+    // Subresource requests inherit their requestor origin and first-party for
+    // cookies from |m_document| directly.
+    if (request.frameType() == WebURLRequest::FrameTypeNone) {
+        RefPtr<SecurityOrigin> documentSite = SecurityOrigin::create(m_document->url());
+        if (request.requestorOrigin()->isUnique() && !documentSite->isUnique())
+            request.setRequestorOrigin(documentSite);
+        if (request.firstPartyForCookies().isEmpty())
+            request.setFirstPartyForCookies(m_document->firstPartyForCookies());
+    }
+
+    // Top-level and nested frame types are taken care of in 'FrameLoadRequest()'.
+    // Auxiliary frame types in 'createWindow()' and 'FrameLoader::load'.
+}
+
 MHTMLArchive* FrameFetchContext::archive() const
 {
     ASSERT(!isMainFrame());
     // TODO(nasko): How should this work with OOPIF?
     // The MHTMLArchive is parsed as a whole, but can be constructed from
     // frames in mutliple processes. In that case, which process should parse
     // it and how should the output be spread back across multiple processes?
     if (!frame()->tree().parent()->isLocalFrame())
         return nullptr;
     return toLocalFrame(frame()->tree().parent())->loader().documentLoader()->fetcher()->archive();
@@ skipping 33 matching lines @@
 }
 
 DEFINE_TRACE(FrameFetchContext)
 {
     visitor->trace(m_document);
     visitor->trace(m_documentLoader);
     FetchContext::trace(visitor);
 }
 
 } // namespace blink