Form submission with blank target is broken.

ios/web/web_state/ui/crw_web_controller.mm

 // Copyright 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #import "ios/web/web_state/ui/crw_web_controller.h"
 
 #import <WebKit/WebKit.h>
 
 #import <objc/runtime.h>
 #include <stddef.h>
@@ skipping 2540 matching lines @@
   return YES;
 }
 
 - (BOOL)handleDocumentSubmitMessage:(base::DictionaryValue*)message
                             context:(NSDictionary*)context {
   std::string href;
   if (!message->GetString("href", &href)) {
     DLOG(WARNING) << "JS message parameter not found: href";
     return NO;
   }
-  const GURL targetURL(href);
-  const GURL currentURL([self currentURL]);
-  bool targetsFrame = false;
-  message->GetBoolean("targetsFrame", &targetsFrame);

[Eugene But (OOO till 7-30), 2017/03/28 18:47:42]

Do we also need to remove targetsFrame from JavaScript?

[michaeldo, 2017/03/29 22:53:37]

Good call, I removed it and updated description. PTAL.

-  if (!targetsFrame && web::UrlHasWebScheme(targetURL)) {
-    // The referrer is not known yet, and will be updated later.
-    const web::Referrer emptyReferrer;
-    [self registerLoadRequest:targetURL
-                     referrer:emptyReferrer
-                   transition:ui::PAGE_TRANSITION_FORM_SUBMIT];
-  }
   std::string formName;
   message->GetString("formName", &formName);
   base::scoped_nsobject<NSSet> observers([_observers copy]);
   // We decide the form is user-submitted if the user has interacted with
   // the main page (using logic from the popup blocker), or if the keyboard
   // is visible.
   BOOL submittedByUser = [context[kUserIsInteractingKey] boolValue] ||
                          [_webViewProxy keyboardAccessory];
   _webStateImpl->OnDocumentSubmitted(formName, submittedByUser);
   return YES;
@@ skipping 2516 matching lines @@
 - (void)simulateLoadRequestWithURL:(const GURL&)URL {
   _lastRegisteredRequestURL = URL;
   _loadPhase = web::LOAD_REQUESTED;
 }
 
 - (NSString*)referrerFromNavigationAction:(WKNavigationAction*)action {
   return [action.request valueForHTTPHeaderField:kReferrerHeaderName];
 }
 
 @end