Do not copy reference fragments for overridden redirects.

net/url_request/url_request_job.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef NET_URL_REQUEST_URL_REQUEST_JOB_H_
 #define NET_URL_REQUEST_URL_REQUEST_JOB_H_
 
 #include <string>
 #include <vector>
 
@@ skipping 139 matching lines @@
   // redirect.  The HTTP status code (e.g., 302) is filled into
   // |*http_status_code| to signify the type of redirect.
   //
   // The caller is responsible for following the redirect by setting up an
   // appropriate replacement Job. Note that the redirected location may be
   // invalid, the caller should be sure it can handle this.
   //
   // The default implementation inspects the response_info_.
   virtual bool IsRedirectResponse(GURL* location, int* http_status_code);
 
+  // Called to determine if it is okay to copy the reference fragment from the
+  // original URL to the redirection target when the redirection target has no
+  // reference fragment.

[mmenke, 2014/04/01 20:26:51]

nit:  Also mention that it's only copied if location does not have it's own
fragment.

[robwu, 2014/04/01 20:46:33]

Done.

+  //
+  // The default implementation returns true.
+  virtual bool IsRedirectFragmentModificationAllowed(
+      const GURL& location) const OVERRIDE;

[mmenke, 2014/04/01 20:26:51]

nit:  Think "CopyFragmentOnRedirect" may be a little clearer.

[robwu, 2014/04/01 20:46:33]

Done. Now the method signatures fit on one line as well :)

+
   // Called to determine if it is okay to redirect this job to the specified
   // location.  This may be used to implement protocol-specific restrictions.
   // If this function returns false, then the URLRequest will fail
   // reporting ERR_UNSAFE_REDIRECT.
   virtual bool IsSafeRedirect(const GURL& location);
 
   // Called to determine if this response is asking for authentication.  Only
   // makes sense for some types of requests.  The caller is responsible for
   // obtaining the credentials passing them to SetAuth.
   virtual bool NeedsAuth();
@@ skipping 246 matching lines @@
   NetworkDelegate* network_delegate_;
 
   base::WeakPtrFactory<URLRequestJob> weak_factory_;
 
   DISALLOW_COPY_AND_ASSIGN(URLRequestJob);
 };
 
 }  // namespace net
 
 #endif  // NET_URL_REQUEST_URL_REQUEST_JOB_H_