Use Referrer-Policy headers for CSS stylesheets

third_party/WebKit/Source/core/html/parser/PreloadRequest.cpp

 // Copyright 2015 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "core/html/parser/PreloadRequest.h"
 
 #include "core/dom/Document.h"
 #include "core/loader/DocumentLoader.h"
 #include "platform/CrossOriginAttributeValue.h"
 #include "platform/loader/fetch/FetchInitiatorInfo.h"
@@ skipping 22 matching lines @@
   FetchInitiatorInfo initiatorInfo;
   initiatorInfo.name = AtomicString(m_initiatorName);
   initiatorInfo.position = m_initiatorPosition;
 
   const KURL& url = completeURL(document);
   // Data URLs are filtered out in the preload scanner.
   DCHECK(!url.protocolIsData());
 
   ResourceRequest resourceRequest(url);
   resourceRequest.setHTTPReferrer(SecurityPolicy::generateReferrer(
-      m_referrerPolicy, url, document->outgoingReferrer()));
+      m_referrerPolicy, url,
+      m_resourceType == Resource::CSSStyleSheet
+          ? m_baseURL.strippedForUseAsReferrer()
+          : document->outgoingReferrer()));
   resourceRequest.setRequestContext(
       ResourceFetcher::determineRequestContext(m_resourceType, false));
 
   FetchRequest request(resourceRequest, initiatorInfo);
 
   if (m_resourceType == Resource::ImportResource) {
     SecurityOrigin* securityOrigin =
         document->contextDocument()->getSecurityOrigin();
     request.setCrossOriginAccessControl(securityOrigin,
                                         CrossOriginAttributeAnonymous);
@@ skipping 19 matching lines @@
       m_resourceType == Resource::ImportResource) {
     request.setCharset(
         m_charset.isEmpty() ? document->characterSet().getString() : m_charset);
   }
   request.setSpeculativePreload(true, m_discoveryTime);
 
   return document->loader()->startPreload(m_resourceType, request);
 }
 
 }  // namespace blink