Make no-location redirect response to be "opaque redirect" when redirect mode is manual.

third_party/WebKit/Source/modules/fetch/FetchManager.cpp

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "modules/fetch/FetchManager.h"
 
 #include <memory>
 #include "bindings/core/v8/ExceptionState.h"
 #include "bindings/core/v8/ScriptPromiseResolver.h"
 #include "bindings/core/v8/ScriptState.h"
@@ skipping 430 matching lines @@
     responseData->setURLList(m_urlList);
   } else {
     DCHECK(response.wasFetchedViaServiceWorker());
     responseData->setURLList(response.urlListViaServiceWorker());
   }
   responseData->setMIMEType(response.mimeType());
   responseData->setResponseTime(response.responseTime());
 
   FetchResponseData* taintedResponse = nullptr;
 
-  if (NetworkUtils::isRedirectResponseCode(m_responseHttpStatusCode)) {
-    Vector<String> locations;
-    responseData->headerList()->getAll(HTTPNames::Location, locations);
-    if (locations.size() > 1) {
-      performNetworkError("Multiple Location header.");
-      return;
-    }
-    if (locations.size() == 1) {
-      KURL locationURL(m_request->url(), locations[0]);
-      if (!locationURL.isValid()) {
-        performNetworkError("Invalid Location header.");
-        return;
-      }
-      ASSERT(m_request->redirect() == WebURLRequest::FetchRedirectModeManual);
-      taintedResponse = responseData->createOpaqueRedirectFilteredResponse();
-    }
-    // When the location header doesn't exist, we don't treat the response
-    // as a redirect response, and execute tainting.
-  }
-  if (!taintedResponse) {
+  DCHECK(!(NetworkUtils::isRedirectResponseCode(m_responseHttpStatusCode) &&
+           responseData->headerList()->has(HTTPNames::Location) &&
+           m_request->redirect() != WebURLRequest::FetchRedirectModeManual));
+
+  if (NetworkUtils::isRedirectResponseCode(m_responseHttpStatusCode) &&
+      m_request->redirect() == WebURLRequest::FetchRedirectModeManual) {
+    taintedResponse = responseData->createOpaqueRedirectFilteredResponse();
+  } else {
     switch (tainting) {
       case FetchRequestData::BasicTainting:
         taintedResponse = responseData->createBasicFilteredResponse();
         break;
       case FetchRequestData::CORSTainting: {
         HTTPHeaderSet headerNames;
         extractCorsExposedHeaderNamesList(response, headerNames);
         taintedResponse = responseData->createCORSFilteredResponse(headerNames);
         break;
       }
@@ skipping 451 matching lines @@
   m_loaders.erase(loader);
   loader->dispose();
 }
 
 DEFINE_TRACE(FetchManager) {
   visitor->trace(m_loaders);
   ContextLifecycleObserver::trace(visitor);
 }
 
 }  // namespace blink