Preserve referrer across CORS-enabled redirects

third_party/WebKit/Source/core/loader/DocumentThreadableLoader.h

 /*
  * Copyright (C) 2009, 2012 Google Inc. All rights reserved.
  * Copyright (C) 2013, Intel Corporation
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions are
  * met:
  *
  *     * Redistributions of source code must retain the above copyright
  * notice, this list of conditions and the following disclaimer.
@@ skipping 22 matching lines @@
 #define DocumentThreadableLoader_h
 
 #include "core/CoreExport.h"
 #include "core/fetch/RawResource.h"
 #include "core/fetch/ResourceOwner.h"
 #include "core/loader/ThreadableLoader.h"
 #include "platform/Timer.h"
 #include "platform/heap/Handle.h"
 #include "platform/network/HTTPHeaderMap.h"
 #include "platform/network/ResourceError.h"
+#include "platform/weborigin/Referrer.h"
 #include "wtf/Forward.h"
 #include "wtf/WeakPtr.h"
 #include "wtf/text/WTFString.h"
 #include <memory>
 
 namespace blink {
 
 class Document;
 class KURL;
 class ResourceRequest;
@@ skipping 164 matching lines @@
 
         // Max number of times that this DocumentThreadableLoader can follow
         // cross-origin redirects.
         // This is used to limit the number of redirects.
         // But this value is not the max number of total redirects allowed,
         // because same-origin redirects are not counted here.
         int m_corsRedirectLimit;
 
         WebURLRequest::FetchRedirectMode m_redirectMode;
 
+        // Holds the referrer after a redirect response was
+        // received. This referrer is used to populate the HTTP Referer
+        // header when following the redirect.
+        bool m_didRedirect;
+        Referrer m_referrerAfterRedirect;
+
         WeakPtrFactory<DocumentThreadableLoader> m_weakFactory;
     };
 
 } // namespace blink
 
 #endif // DocumentThreadableLoader_h