SameSite: Correctly set requests' initiator for new tabs.

third_party/WebKit/Source/core/loader/FrameLoadRequest.h

 /*
  * Copyright (C) 2003, 2006, 2010 Apple Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions
  * are met:
  * 1. Redistributions of source code must retain the above copyright
  *    notice, this list of conditions and the following disclaimer.
  * 2. Redistributions in binary form must reproduce the above copyright
  *    notice, this list of conditions and the following disclaimer in the
@@ skipping 13 matching lines @@
  */
 
 #ifndef FrameLoadRequest_h
 #define FrameLoadRequest_h
 
 #include "core/dom/Document.h"
 #include "core/events/Event.h"
 #include "core/fetch/ResourceLoaderOptions.h"
 #include "core/fetch/SubstituteData.h"
 #include "core/loader/FrameLoaderTypes.h"
-#include "platform/network/ResourceRequest.h"
 
 namespace blink {
 
 class HTMLFormElement;
+class ResourceRequest;
+class SubstituteData;
 
-struct FrameLoadRequest {
+struct CORE_EXPORT FrameLoadRequest {
     STACK_ALLOCATED();
 public:
-    explicit FrameLoadRequest(Document* originDocument)
-        : FrameLoadRequest(originDocument, ResourceRequest())
-    {
-    }
-
-    FrameLoadRequest(Document* originDocument, const ResourceRequest& resourceRequest)
-        : FrameLoadRequest(originDocument, resourceRequest, AtomicString())
-    {
-    }
-
-    FrameLoadRequest(Document* originDocument, const ResourceRequest& resourceRequest, const AtomicString& frameName)
-        : FrameLoadRequest(originDocument, resourceRequest, frameName, CheckContentSecurityPolicy)
-    {
-    }
-
-    FrameLoadRequest(Document* originDocument, const ResourceRequest& resourceRequest, const SubstituteData& substituteData)
-        : FrameLoadRequest(originDocument, resourceRequest, AtomicString(), substituteData, CheckContentSecurityPolicy)
-    {
-    }
-
-    FrameLoadRequest(Document* originDocument, const ResourceRequest& resourceRequest, const AtomicString& frameName, ContentSecurityPolicyDisposition shouldCheckMainWorldContentSecurityPolicy)
-        : FrameLoadRequest(originDocument, resourceRequest, frameName, SubstituteData(), shouldCheckMainWorldContentSecurityPolicy)
-    {
-    }
+    explicit FrameLoadRequest(Document* originDocument);
+    FrameLoadRequest(Document* originDocument, const ResourceRequest&);
+    FrameLoadRequest(Document* originDocument, const ResourceRequest&, const AtomicString& frameName);
+    FrameLoadRequest(Document* originDocument, const ResourceRequest&, const SubstituteData&);
+    FrameLoadRequest(Document* originDocument, const ResourceRequest&, const AtomicString& frameName, ContentSecurityPolicyDisposition);
 
     Document* originDocument() const { return m_originDocument.get(); }
 
     ResourceRequest& resourceRequest() { return m_resourceRequest; }
     const ResourceRequest& resourceRequest() const { return m_resourceRequest; }
 
     const AtomicString& frameName() const { return m_frameName; }
     void setFrameName(const AtomicString& frameName) { m_frameName = frameName; }
 
     const SubstituteData& substituteData() const { return m_substituteData; }
@@ skipping 12 matching lines @@
 
     ShouldSendReferrer getShouldSendReferrer() const { return m_shouldSendReferrer; }
     void setShouldSendReferrer(ShouldSendReferrer shouldSendReferrer) { m_shouldSendReferrer = shouldSendReferrer; }
 
     ShouldSetOpener getShouldSetOpener() const { return m_shouldSetOpener; }
     void setShouldSetOpener(ShouldSetOpener shouldSetOpener) { m_shouldSetOpener = shouldSetOpener; }
 
     ContentSecurityPolicyDisposition shouldCheckMainWorldContentSecurityPolicy() const { return m_shouldCheckMainWorldContentSecurityPolicy; }
 
 private:
-    FrameLoadRequest(Document* originDocument, const ResourceRequest& resourceRequest, const AtomicString& frameName, const SubstituteData& substituteData, ContentSecurityPolicyDisposition shouldCheckMainWorldContentSecurityPolicy)
-        : m_originDocument(originDocument)
-        , m_resourceRequest(resourceRequest)
-        , m_frameName(frameName)
-        , m_substituteData(substituteData)
-        , m_replacesCurrentItem(false)
-        , m_clientRedirect(ClientRedirectPolicy::NotClientRedirect)
-        , m_shouldSendReferrer(MaybeSendReferrer)
-        , m_shouldSetOpener(MaybeSetOpener)
-        , m_shouldCheckMainWorldContentSecurityPolicy(shouldCheckMainWorldContentSecurityPolicy)
-    {
-        initializeFetchFlags();
-        if (originDocument)
-            m_resourceRequest.setRequestorOrigin(SecurityOrigin::create(originDocument->url()));
-    }
-    void initializeFetchFlags()
-    {
-        // These flags are passed to a service worker which controls the page.
-        m_resourceRequest.setFetchRequestMode(WebURLRequest::FetchRequestModeNavigate);
-        m_resourceRequest.setFetchCredentialsMode(WebURLRequest::FetchCredentialsModeInclude);
-        m_resourceRequest.setFetchRedirectMode(WebURLRequest::FetchRedirectModeManual);
-    }
+    FrameLoadRequest(Document* originDocument, const ResourceRequest&, const AtomicString& frameName, const SubstituteData&, ContentSecurityPolicyDisposition);
+
     Member<Document> m_originDocument;
     ResourceRequest m_resourceRequest;
     AtomicString m_frameName;
     SubstituteData m_substituteData;
     bool m_replacesCurrentItem;
     ClientRedirectPolicy m_clientRedirect;
     Member<Event> m_triggeringEvent;
     Member<HTMLFormElement> m_form;
     ShouldSendReferrer m_shouldSendReferrer;
     ShouldSetOpener m_shouldSetOpener;
     ContentSecurityPolicyDisposition m_shouldCheckMainWorldContentSecurityPolicy;
 };
 
 } // namespace blink
 
 #endif // FrameLoadRequest_h