Make no-location redirect response to be "opaque redirect" when redirect mode is manual.

third_party/WebKit/Source/modules/fetch/FetchManager.cpp

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "modules/fetch/FetchManager.h"
 
 #include <memory>
 #include "bindings/core/v8/ExceptionState.h"
 #include "bindings/core/v8/ScriptPromiseResolver.h"
 #include "bindings/core/v8/ScriptState.h"
@@ skipping 432 matching lines @@
     response_data->SetURLList(url_list_);
   } else {
     DCHECK(response.WasFetchedViaServiceWorker());
     response_data->SetURLList(response.UrlListViaServiceWorker());
   }
   response_data->SetMIMEType(response.MimeType());
   response_data->SetResponseTime(response.ResponseTime());
 
   FetchResponseData* tainted_response = nullptr;
 
-  if (NetworkUtils::IsRedirectResponseCode(response_http_status_code_)) {
-    Vector<String> locations;
-    response_data->HeaderList()->GetAll(HTTPNames::Location, locations);
-    if (locations.size() > 1) {
-      PerformNetworkError("Multiple Location header.");
-      return;
-    }
-    if (locations.size() == 1) {
-      KURL location_url(request_->Url(), locations[0]);
-      if (!location_url.IsValid()) {
-        PerformNetworkError("Invalid Location header.");
-        return;
-      }
-      ASSERT(request_->Redirect() == WebURLRequest::kFetchRedirectModeManual);
-      tainted_response = response_data->CreateOpaqueRedirectFilteredResponse();
-    }
-    // When the location header doesn't exist, we don't treat the response
-    // as a redirect response, and execute tainting.
-  }
-  if (!tainted_response) {
+  DCHECK(!(NetworkUtils::IsRedirectResponseCode(response_http_status_code_) &&
+           response_data->HeaderList()->Has(HTTPNames::Location) &&
+           request_->Redirect() != WebURLRequest::kFetchRedirectModeManual));
+
+  if (NetworkUtils::IsRedirectResponseCode(response_http_status_code_) &&
+      request_->Redirect() == WebURLRequest::kFetchRedirectModeManual) {
+    tainted_response = response_data->CreateOpaqueRedirectFilteredResponse();
+  } else {
     switch (tainting) {
       case FetchRequestData::kBasicTainting:
         tainted_response = response_data->CreateBasicFilteredResponse();
         break;
       case FetchRequestData::kCORSTainting: {
         HTTPHeaderSet header_names;
         ExtractCorsExposedHeaderNamesList(response, header_names);
         tainted_response =
             response_data->CreateCORSFilteredResponse(header_names);
         break;
@@ skipping 452 matching lines @@
   loaders_.erase(loader);
   loader->Dispose();
 }
 
 DEFINE_TRACE(FetchManager) {
   visitor->Trace(loaders_);
   ContextLifecycleObserver::Trace(visitor);
 }
 
 }  // namespace blink