Clear username and password from location.href when basic HTTP

Source/platform/weborigin/KURL.cpp

Index: Source/platform/weborigin/KURL.cpp
diff --git a/Source/platform/weborigin/KURL.cpp b/Source/platform/weborigin/KURL.cpp
index dd47d75e2afc02f70087559cbe9c06be0fcb29e9..728463711e62643b9d0195dcc74d3ca5514f0174 100644
--- a/Source/platform/weborigin/KURL.cpp
+++ b/Source/platform/weborigin/KURL.cpp
@@ -143,6 +143,17 @@ String KURL::strippedForUseAsReferrer() const
     return string();
 }
 
+String KURL::strippedForUseAsHref() const
+{
+    if (m_parsed.username.is_nonempty() || m_parsed.password.is_nonempty()) {
+        KURL href(*this);
+        href.setUser(String());
+        href.setPass(String());
+        return href.string();
+    }
+    return string();
+}
+
 bool KURL::isLocalFile() const
 {
     // Including feed here might be a bad idea since drag and drop uses this check