Implement the "first-party-only" cookie flag.

net/url_request/url_request_http_job.cc

Index: net/url_request/url_request_http_job.cc
diff --git a/net/url_request/url_request_http_job.cc b/net/url_request/url_request_http_job.cc
index 098ef85e8310e678b4b6314ed9f22b208b6ae219..49f45bb853495cff44e0648f343b1287d03160dc 100644
--- a/net/url_request/url_request_http_job.cc
+++ b/net/url_request/url_request_http_job.cc
@@ -629,6 +629,11 @@ void URLRequestHttpJob::AddCookieHeaderAndStart() {
 void URLRequestHttpJob::DoLoadCookies() {
   CookieOptions options;
   options.set_include_httponly();
+
+  // TODO(mkwst): Pipe a switch down here to allow us to decide whether we
+  // should enforce "first-party" cookies or not (by setting |options|'s
+  // first-party-url to the first-party-for-cookies value. crbug.com/459154

[mmenke, 2015/02/19 21:04:35]

So we already have URLRequest::FirstPartyURLPolicy and
URLRequest::ReferrerPolicy.  If we're going to be adding yet another, maybe
bundle them up in a struct and pass them all together?  I'm really not a big fan
of growing the size of URLRequest - it has a huge number of public methods, and
I'd really like to see us cut down on them.

+
   GetCookieStore()->GetCookiesWithOptionsAsync(
       request_->url(), options,
       base::Bind(&URLRequestHttpJob::OnCookiesLoaded,