Sanitize headers in Proxy Authentication Required responses

net/http/proxy_client_socket.h

Index: net/http/proxy_client_socket.h
diff --git a/net/http/proxy_client_socket.h b/net/http/proxy_client_socket.h
index aa5903811166f8016a7327dc3d6f3f7151f1e5a8..f3347c8972e14677a15b1841c5de9dd65389124b 100644
--- a/net/http/proxy_client_socket.h
+++ b/net/http/proxy_client_socket.h
@@ -74,13 +74,19 @@ class NET_EXPORT_PRIVATE ProxyClientSocket : public StreamSocket {
                                        const GURL& url,
                                        bool is_https_proxy);
 
+  // When a proxy authentication response is received during tunnel
+  // construction, this method should be called to strip everything
+  // but the auth header from the redirect response.  If it returns
+  // false, the response should be discarded and tunnel construction should
+  // fail.
+  static bool SanitizeProxyAuth(HttpResponseInfo* response);
+
   // When a redirect (e.g. 302 response) is received during tunnel
   // construction, this method should be called to strip everything
   // but the Location header from the redirect response.  If it returns
   // false, the response should be discarded and tunnel construction should
-  // fail.  |url| is for logging purposes.
-  static bool SanitizeProxyRedirect(HttpResponseInfo* response,
-                                    const GURL& url);
+  // fail.
+  static bool SanitizeProxyRedirect(HttpResponseInfo* response);
 
  private:
   DISALLOW_COPY_AND_ASSIGN(ProxyClientSocket);