Check CORS policy on redirect in TextTrackLoader

third_party/WebKit/Source/core/loader/TextTrackLoader.cpp

Index: third_party/WebKit/Source/core/loader/TextTrackLoader.cpp
diff --git a/third_party/WebKit/Source/core/loader/TextTrackLoader.cpp b/third_party/WebKit/Source/core/loader/TextTrackLoader.cpp
index 98629645ff6457d2cc093be05cdea349105f9542..c3598e5caadaf472a81dd6231856d5a2568d5e6b 100644
--- a/third_party/WebKit/Source/core/loader/TextTrackLoader.cpp
+++ b/third_party/WebKit/Source/core/loader/TextTrackLoader.cpp
@@ -67,6 +67,18 @@ void TextTrackLoader::cancelLoad()
     clearResource();
 }
 
+void TextTrackLoader::redirectReceived(Resource* resource, ResourceRequest& request, const ResourceResponse&)
+{
+    DCHECK_EQ(this->resource(), resource);
+    if (resource->options().corsEnabled == IsCORSEnabled || document().getSecurityOrigin()->canRequestNoSuborigin(request.url()))
+        return;
+
+    corsPolicyPreventedLoad(document().getSecurityOrigin(), request.url());
+    if (!m_cueLoadTimer.isActive())
+        m_cueLoadTimer.startOneShot(0, BLINK_FROM_HERE);
+    clearResource();
+}
+
 void TextTrackLoader::dataReceived(Resource* resource, const char* data, size_t length)
 {
     ASSERT(this->resource() == resource);