Enable blocking of subresource requests whose URLs include credentials.

content/child/runtime_features.cc

Index: content/child/runtime_features.cc
diff --git a/content/child/runtime_features.cc b/content/child/runtime_features.cc
index 2bbc8ab40dcae71741f533e9a0018857c0b375f3..d7b8b9b4962c3d43a90650cb87f954e8c6b5d03e 100644
--- a/content/child/runtime_features.cc
+++ b/content/child/runtime_features.cc
@@ -366,6 +366,11 @@ void SetRuntimeFeaturesDefaultsAndUpdateFromArgs(
   if (base::FeatureList::IsEnabled(features::kLoadingWithMojo))
     WebRuntimeFeatures::enableLoadingWithMojo(true);
 
+  if (!base::FeatureList::IsEnabled(features::kBlockCredentialedSubresources)) {
+    WebRuntimeFeatures::enableFeatureFromString("BlockCredentialedSubresources",
+                                                false);
+  }
+
   // Enable explicitly enabled features, and then disable explicitly disabled
   // ones.
   if (command_line.HasSwitch(switches::kEnableBlinkFeatures)) {