Index: Source/core/fetch/CrossOriginAccessControl.cpp |
diff --git a/Source/core/fetch/CrossOriginAccessControl.cpp b/Source/core/fetch/CrossOriginAccessControl.cpp |
index 92dafdf3c2b1fd90666bf3e51d2bb958c8e265ab..fea74afa1deee3859fb8646668940d051919eddb 100644 |
--- a/Source/core/fetch/CrossOriginAccessControl.cpp |
+++ b/Source/core/fetch/CrossOriginAccessControl.cpp |
@@ -65,6 +65,7 @@ void updateRequestForAccessControl(ResourceRequest& request, SecurityOrigin* sec |
{ |
request.removeCredentials(); |
request.setAllowStoredCredentials(allowCredentials == AllowStoredCredentials); |
yhirano
2014/10/07 08:03:14
Requiring to call two methods in all occurrences m
|
+ request.setFetchCredentialsMode(allowCredentials == AllowStoredCredentials ? WebURLRequest::FetchCredentialsModeInclude : WebURLRequest::FetchCredentialsModeSameOrigin); |
yhirano
2014/10/07 08:03:14
This behavior (setting same-origin if allowCredent
|
if (securityOrigin) |
request.setHTTPOrigin(securityOrigin->toAtomicString()); |