Preserving Content-Type header from http request in OpenURL path.

content/browser/security_exploit_browsertest.cc

Index: content/browser/security_exploit_browsertest.cc
diff --git a/content/browser/security_exploit_browsertest.cc b/content/browser/security_exploit_browsertest.cc
index 2463c00c86d8fca326bf7726512cd8f1c3e2b3b9..0b9c024d4d524abf4f316c639a24fa80246369b2 100644
--- a/content/browser/security_exploit_browsertest.cc
+++ b/content/browser/security_exploit_browsertest.cc
@@ -90,8 +90,8 @@ RenderViewHostImpl* PrepareToDuplicateHosts(Shell* shell,
   WebContentsImpl* wc = static_cast<WebContentsImpl*>(shell->web_contents());
   wc->GetFrameTree()->root()->navigator()->RequestOpenURL(
       wc->GetFrameTree()->root()->current_frame_host(), extension_url, false,
-      nullptr, nullptr, Referrer(), WindowOpenDisposition::CURRENT_TAB, false,
-      true);
+      nullptr, std::string(), nullptr, Referrer(),
+      WindowOpenDisposition::CURRENT_TAB, false, true);
 
   // Since the navigation above requires a cross-process swap, there will be a
   // speculative/pending RenderFrameHost. Ensure it exists and is in a different