Fix SSL redirects with PlzNavigate.

content/browser/loader/resource_dispatcher_host_impl.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // See http://dev.chromium.org/developers/design-documents/multi-process-resource-loading
 
 #include "content/browser/loader/resource_dispatcher_host_impl.h"
 
 #include <stddef.h>
 
@@ skipping 1346 matching lines @@
                              new URLRequestServiceWorkerData());
   }
 
   // If the request is a MAIN_FRAME request, the first-party URL gets updated on
   // redirects.
   if (request_data.resource_type == RESOURCE_TYPE_MAIN_FRAME) {
     new_request->set_first_party_url_policy(
         net::URLRequest::UPDATE_FIRST_PARTY_URL_ON_REDIRECT);
   }
 
-  const Referrer referrer(request_data.referrer, request_data.referrer_policy);
-  SetReferrerForRequest(new_request.get(), referrer);
+  // For PlzNavigate, this request has already been made and the referrer was
+  // checked previously. So don't set the referrer for this stream request, or
+  // else it will fail for SSL redirects since net/ will think the blob:https
+  // for the stream is not a secure scheme (specifically, in the call to
+  // ComputeReferrerForRedirect).
+  if (!is_navigation_stream_request) {
+    const Referrer referrer(
+        request_data.referrer, request_data.referrer_policy);
+    SetReferrerForRequest(new_request.get(), referrer);
+  }
 
   new_request->SetExtraRequestHeaders(headers);
 
   storage::BlobStorageContext* blob_context =
       GetBlobStorageContext(filter_->blob_storage_context());
   // Resolve elements from request_body and prepare upload data.
   if (request_data.request_body.get()) {
     // |blob_context| could be null when the request is from the plugins because
     // ResourceMessageFilters created in PluginProcessHost don't have the blob
     // context.
@@ skipping 1316 matching lines @@
         request_info->GetRouteID(), is_content_initiated, true, &throttles);
     if (!throttles.empty()) {
       handler.reset(new ThrottlingResourceHandler(std::move(handler), request,
                                                   std::move(throttles)));
     }
   }
   return handler;
 }
 
 }  // namespace content