Fix PingLoader to omit credentials for cross-origin violation reports

third_party/WebKit/Source/core/loader/PingLoader.cpp

 /*
  * Copyright (C) 2010 Google Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions are
  * met:
  *
  *     * Redistributions of source code must retain the above copyright
  * notice, this list of conditions and the following disclaimer.
  *     * Redistributions in binary form must reproduce the above
@@ skipping 399 matching lines @@
 bool sendPingCommon(LocalFrame* frame,
                     ResourceRequest& request,
                     const AtomicString& initiator,
                     StoredCredentials credentialsAllowed,
                     bool isBeacon) {
   if (MixedContentChecker::shouldBlockFetch(frame, request, request.url()))
     return false;
 
   // The loader keeps itself alive until it receives a response and disposes
   // itself.
-  PingLoaderImpl* loader = new PingLoaderImpl(frame, request, initiator,
-                                              AllowStoredCredentials, true);
+  PingLoaderImpl* loader =
+      new PingLoaderImpl(frame, request, initiator, credentialsAllowed, true);
   DCHECK(loader);
 
   return true;
 }
 
 bool sendBeaconCommon(LocalFrame* frame,
                       int allowance,
                       const KURL& url,
                       const Beacon& beacon,
                       int& payloadLength) {
@@ skipping 120 matching lines @@
 bool PingLoader::sendBeacon(LocalFrame* frame,
                             int allowance,
                             const KURL& beaconURL,
                             Blob* data,
                             int& payloadLength) {
   BeaconBlob beacon(data);
   return sendBeaconCommon(frame, allowance, beaconURL, beacon, payloadLength);
 }
 
 }  // namespace blink