Clean up SecurityOrigin handling around CrossOriginAccessControl::handleRedirect()

third_party/WebKit/Source/core/loader/DocumentThreadableLoader.h

 /*
  * Copyright (C) 2009, 2012 Google Inc. All rights reserved.
  * Copyright (C) 2013, Intel Corporation
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions are
  * met:
  *
  *     * Redistributions of source code must retain the above copyright
  * notice, this list of conditions and the following disclaimer.
@@ skipping 156 matching lines @@
                 oldResource->removeClient(this);
 
             if (newResource) {
                 m_resource = newResource;
                 m_resource->addClient(this);
             }
         }
         Member<RawResource> m_resource;
         // End of ResourceOwner re-implementation, see above.
 
-        SecurityOrigin* getSecurityOrigin() const;
+        const SecurityOrigin* getSecurityOrigin() const;
         Document& document() const;
 
         ThreadableLoaderClient* m_client;
         Member<Document> m_document;
 
         const ThreadableLoaderOptions m_options;
         // Some items may be overridden by m_forceDoNotAllowStoredCredentials
         // and m_securityOrigin. In such a case, build a ResourceLoaderOptions
         // with up-to-date values from them and this variable, and use it.
         const ResourceLoaderOptions m_resourceLoaderOptions;
@@ skipping 44 matching lines @@
         // header when following the redirect.
         bool m_didRedirect;
         Referrer m_referrerAfterRedirect;
 
         WeakPtrFactory<DocumentThreadableLoader> m_weakFactory;
     };
 
 } // namespace blink
 
 #endif // DocumentThreadableLoader_h