Include the Origin header for XHR and Fetch API even if the request is same-origin

third_party/WebKit/Source/core/loader/ThreadableLoader.h

 /*
  * Copyright (C) 2009 Google Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions are
  * met:
  *
  *     * Redistributions of source code must retain the above copyright
  * notice, this list of conditions and the following disclaimer.
  *     * Redistributions in binary form must reproduce the above
@@ skipping 44 matching lines @@
     ConsiderPreflight,
     ForcePreflight,
     PreventPreflight
 };
 
 enum ContentSecurityPolicyEnforcement {
     EnforceContentSecurityPolicy,
     DoNotEnforceContentSecurityPolicy,
 };
 
+// Instructs whether or not to include the Origin header in same-origin
+// requests.
+enum SameOriginHeaderPolicy {
+    IncludeSameOriginHeader,
+    OmitSameOriginHeader,
+};
+
 struct ThreadableLoaderOptions {
     DISALLOW_NEW();
     ThreadableLoaderOptions()
         : preflightPolicy(ConsiderPreflight)
         , crossOriginRequestPolicy(DenyCrossOriginRequests)
         , contentSecurityPolicyEnforcement(EnforceContentSecurityPolicy)
-        , timeoutMilliseconds(0) { }
+        , timeoutMilliseconds(0)
+        , sameOriginHeaderPolicy(OmitSameOriginHeader) { }
 
     // When adding members, CrossThreadThreadableLoaderOptionsData should
     // be updated.
     PreflightPolicy preflightPolicy; // If AccessControl is used, how to determine if a preflight is needed.
     CrossOriginRequestPolicy crossOriginRequestPolicy;
     AtomicString initiator;
     ContentSecurityPolicyEnforcement contentSecurityPolicyEnforcement;
     unsigned long timeoutMilliseconds;
+    SameOriginHeaderPolicy sameOriginHeaderPolicy;
 };
 
 // Encode AtomicString as String to cross threads.
 struct CrossThreadThreadableLoaderOptionsData {
     STACK_ALLOCATED();
     explicit CrossThreadThreadableLoaderOptionsData(const ThreadableLoaderOptions& options)
         : preflightPolicy(options.preflightPolicy)
         , crossOriginRequestPolicy(options.crossOriginRequestPolicy)
         , initiator(options.initiator.getString().isolatedCopy())
         , contentSecurityPolicyEnforcement(options.contentSecurityPolicyEnforcement)
@@ skipping 97 matching lines @@
 
     DEFINE_INLINE_VIRTUAL_TRACE() {}
 
 protected:
     ThreadableLoader() { }
 };
 
 } // namespace blink
 
 #endif // ThreadableLoader_h