Remove dup'ed code for RequestorOrigin and FirstPartyCookie

content/renderer/fetchers/resource_fetcher_impl.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "content/renderer/fetchers/resource_fetcher_impl.h"
 
 #include <stdint.h>
 
 #include "base/logging.h"
 #include "base/macros.h"
@@ skipping 165 matching lines @@
   DCHECK(!loader_);
   DCHECK(!client_);
   DCHECK(!request_.IsNull());
   DCHECK(frame);
   DCHECK(!frame->GetDocument().IsNull());
   if (!request_.HttpBody().IsNull())
     DCHECK_NE("GET", request_.HttpMethod().Utf8()) << "GETs can't have bodies.";
 
   request_.SetRequestContext(request_context);
   request_.SetFirstPartyForCookies(frame->GetDocument().FirstPartyForCookies());
+  request_.SetRequestorOrigin(frame->GetDocument().GetSecurityOrigin());

[kinuko, 2017/06/07 02:00:48]

I think this was missing before this change (i.e. we are sending unique origin
in the current code)

   request_.AddHTTPOriginIfNeeded(blink::WebSecurityOrigin::CreateUnique());
 
   client_.reset(new ClientImpl(this, callback));
 
   loader_ = frame->CreateURLLoader();
   loader_->LoadAsynchronously(request_, client_.get());
 
   // No need to hold on to the request; reset it now.
   request_ = blink::WebURLRequest();
 }
 
 void ResourceFetcherImpl::SetTimeout(const base::TimeDelta& timeout) {
   DCHECK(loader_);
   DCHECK(client_);
   DCHECK(!client_->completed());
 
   timeout_timer_.Start(FROM_HERE, timeout, this, &ResourceFetcherImpl::Cancel);
 }
 
 void ResourceFetcherImpl::OnLoadComplete() {
   timeout_timer_.Stop();
 }
 
 void ResourceFetcherImpl::Cancel() {
   loader_->Cancel();
   client_->Cancel();
 }
 
 }  // namespace content