When historyEntryRequiresUserGesture is enabled, exempt docs that have been committed for 5 seconds

third_party/WebKit/Source/core/loader/FrameLoader.cpp

 /*
  * Copyright (C) 2006, 2007, 2008, 2009, 2010, 2011 Apple Inc. All rights
  * reserved.
  * Copyright (C) 2008 Nokia Corporation and/or its subsidiary(-ies)
  * Copyright (C) 2008, 2009 Torch Mobile Inc. All rights reserved.
  * (http://www.torchmobile.com/)
  * Copyright (C) 2008 Alp Toker <alp@atoker.com>
  * Copyright (C) Research In Motion Limited 2009. All rights reserved.
  * Copyright (C) 2011 Kris Jordan <krisjordan@gmail.com>
  * Copyright (C) 2011 Google Inc. All rights reserved.
@@ skipping 697 matching lines @@
     if (!request.originDocument())
       return FrameLoadTypeReload;
     return FrameLoadTypeReplaceCurrentItem;
   }
 
   if (request.substituteData().failingURL() ==
           m_documentLoader->urlForHistory() &&
       m_documentLoader->loadType() == FrameLoadTypeReload)
     return FrameLoadTypeReload;
 
-  if (m_frame->settings()->getHistoryEntryRequiresUserGesture() &&
-      request.originDocument() &&
-      !request.originDocument()->frame()->hasReceivedUserGesture())
+  if (request.originDocument() &&
+      !request.originDocument()->canCreateHistoryEntry())
     return FrameLoadTypeReplaceCurrentItem;
 
   if (request.resourceRequest().url().isEmpty() &&
       request.substituteData().failingURL().isEmpty()) {
     return FrameLoadTypeReplaceCurrentItem;
   }
 
   return FrameLoadTypeStandard;
 }
 
@@ skipping 1020 matching lines @@
   // TODO(japhet): This is needed because the browser process DCHECKs if the
   // first entry we commit in a new frame has replacement set. It's unclear
   // whether the DCHECK is right, investigate removing this special case.
   bool replaceCurrentItem = loadType == FrameLoadTypeReplaceCurrentItem &&
                             (!opener() || !request.url().isEmpty());
   loader->setReplacesCurrentHistoryItem(replaceCurrentItem);
   return loader;
 }
 
 }  // namespace blink