Check CORS policy on redirect in TextTrackLoader

third_party/WebKit/Source/core/loader/TextTrackLoader.cpp

 /*
  * Copyright (C) 2011 Google Inc.  All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions
  * are met:
  * 1. Redistributions of source code must retain the above copyright
  *    notice, this list of conditions and the following disclaimer.
  * 2. Redistributions in binary form must reproduce the above copyright
  *    notice, this list of conditions and the following disclaimer in the
@@ skipping 49 matching lines @@
 
     if (m_state >= Finished)
         m_client->cueLoadingCompleted(this, m_state == Failed);
 }
 
 void TextTrackLoader::cancelLoad()
 {
     clearResource();
 }
 
+void TextTrackLoader::redirectReceived(Resource* resource, ResourceRequest& request, const ResourceResponse&)
+{
+    DCHECK_EQ(this->resource(), resource);
+    if (resource->options().corsEnabled == IsCORSEnabled || document().getSecurityOrigin()->canRequestNoSuborigin(request.url()))
+        return;
+
+    corsPolicyPreventedLoad(document().getSecurityOrigin(), request.url());
+    if (!m_cueLoadTimer.isActive())
+        m_cueLoadTimer.startOneShot(0, BLINK_FROM_HERE);
+    clearResource();
+}
+
 void TextTrackLoader::dataReceived(Resource* resource, const char* data, size_t length)
 {
     DCHECK_EQ(this->resource(), resource);
 
     if (m_state == Failed)
         return;
 
     if (!m_cueParser)
         m_cueParser = VTTParser::create(this, document());
 
@@ skipping 82 matching lines @@
 DEFINE_TRACE(TextTrackLoader)
 {
     visitor->trace(m_client);
     visitor->trace(m_cueParser);
     visitor->trace(m_document);
     ResourceOwner<RawResource>::trace(visitor);
     VTTParserClient::trace(visitor);
 }
 
 } // namespace blink