Preserving Content-Type header from http request in OpenURL path.

content/browser/security_exploit_browsertest.cc

Index: content/browser/security_exploit_browsertest.cc
diff --git a/content/browser/security_exploit_browsertest.cc b/content/browser/security_exploit_browsertest.cc
index 8b5c4cc15820a57893054903ff97ed5abe287899..d1489980af35448d568b85593220beedaa49a2e8 100644
--- a/content/browser/security_exploit_browsertest.cc
+++ b/content/browser/security_exploit_browsertest.cc
@@ -91,8 +91,8 @@ RenderViewHostImpl* PrepareToDuplicateHosts(Shell* shell,
   WebContentsImpl* wc = static_cast<WebContentsImpl*>(shell->web_contents());
   wc->GetFrameTree()->root()->navigator()->RequestOpenURL(
       wc->GetFrameTree()->root()->current_frame_host(), extension_url, false,
-      nullptr, nullptr, Referrer(), WindowOpenDisposition::CURRENT_TAB, false,
-      true);
+      nullptr, std::string(), nullptr, Referrer(),
+      WindowOpenDisposition::CURRENT_TAB, false, true);
 
   // Since the navigation above requires a cross-process swap, there will be a
   // speculative/pending RenderFrameHost. Ensure it exists and is in a different