Add virtual tests for XHR with mojo-loading

content/child/url_response_body_consumer.cc

Index: content/child/url_response_body_consumer.cc
diff --git a/content/child/url_response_body_consumer.cc b/content/child/url_response_body_consumer.cc
index 5016ee3a5b6c0646e383d43c26b745bbcdd6c816..0bbb44d6db7b99ab23d5318401c58900d71ef3a8 100644
--- a/content/child/url_response_body_consumer.cc
+++ b/content/child/url_response_body_consumer.cc
@@ -87,6 +87,9 @@ void URLResponseBodyConsumer::OnReadable(MojoResult unused) {
   if (has_been_cancelled_ || has_seen_end_of_data_)
     return;
 
+  // Protect |this| as RequestPeer::OnReceivedData may call deref.
+  scoped_refptr<URLResponseBodyConsumer> protect(this);
+
   // TODO(yhirano): Suppress notification when deferred.
   while (!has_been_cancelled_) {
     const void* buffer = nullptr;