CORS: Measure some ways in which we might tighten CORS processing.

third_party/WebKit/Source/core/loader/DocumentThreadableLoader.h

 /*
  * Copyright (C) 2009, 2012 Google Inc. All rights reserved.
  * Copyright (C) 2013, Intel Corporation
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions are
  * met:
  *
  *     * Redistributions of source code must retain the above copyright
  * notice, this list of conditions and the following disclaimer.
@@ skipping 169 matching lines @@
     }
   }
   Member<RawResource> resource_;
   // End of ResourceOwner re-implementation, see above.
 
   const SecurityOrigin* GetSecurityOrigin() const;
 
   // TODO(kinuko): Remove dependency to document.
   Document* GetDocument() const;
 
+  // TODO(mkwst): Remove this once we have the data to make decisions about
+  // changes to CORS.
+  void MeasureAccessControlAllowOrigin(const ResourceResponse&) const;
+
   ThreadableLoaderClient* client_;
   Member<ThreadableLoadingContext> loading_context_;
 
   const ThreadableLoaderOptions options_;
   // Some items may be overridden by m_forceDoNotAllowStoredCredentials and
   // m_securityOrigin. In such a case, build a ResourceLoaderOptions with
   // up-to-date values from them and this variable, and use it.
   const ResourceLoaderOptions resource_loader_options_;
 
   bool force_do_not_allow_stored_credentials_;
@@ skipping 39 matching lines @@
   // used to populate the HTTP Referer header when following the redirect.
   bool override_referrer_;
   Referrer referrer_after_redirect_;
 
   RawResourceClientStateChecker checker_;
 };
 
 }  // namespace blink
 
 #endif  // DocumentThreadableLoader_h