[Fetch] Request with GET/HEAD method cannot have body

Source/modules/fetch/Request.cpp

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "config.h"
 #include "modules/fetch/Request.h"
 
 #include "bindings/core/v8/Dictionary.h"
 #include "core/dom/Document.h"
 #include "core/dom/ExecutionContext.h"
@@ skipping 161 matching lines @@
         r->headers()->fillWith(init.headersDictionary, exceptionState);
     } else {
         ASSERT(headers);
         r->headers()->fillWith(headers, exceptionState);
     }
     if (exceptionState.hadException())
         return 0;
 
     // "21. If |init|'s body member is present, run these substeps:"
     if (init.bodyBlobHandle) {
-        // "1. Let |stream| and |Content-Type| be the result of extracting
-        // |init|'s body member."
-        // "2. Set |r|'s request's body to |stream|."
-        // "3.If |Content-Type| is non-null and |r|'s request's header list
+        // "1. If request's method is `GET` or `HEAD`, throw a TypeError."
+        // "2. Let |stream| and |Content-Type| be the result of extracting
+        //  |init|'s body member."
+        // "3. Set |r|'s request's body to |stream|."
+        // "4. If |Content-Type| is non-null and |r|'s request's header list
         //  contains no header named `Content-Type`, append
-        // `Content-Type`/|Content-Type| to |r|'s Headers object. Rethrow any
-        // exception."
+        //  `Content-Type`/|Content-Type| to |r|'s Headers object. Rethrow any
+        //  exception."
+        if (request->method() == "GET" || request->method() == "HEAD") {
+            exceptionState.throwTypeError("Request with GET/HEAD method cannot have body.");
+            return 0;
+        }
         r->setBodyBlobHandle(init.bodyBlobHandle);
         if (!init.bodyBlobHandle->type().isEmpty() && !r->headers()->has("Content-Type", exceptionState)) {
             r->headers()->append("Content-Type", init.bodyBlobHandle->type(), exceptionState);
         }
         if (exceptionState.hadException())
             return 0;
     }
     // "22. Set |r|'s MIME type to the result of extracting a MIME type from
     // |r|'s request's header list."
     // FIXME: We don't have MIME type in Request object yet.
@@ skipping 196 matching lines @@
 }
 
 void Request::trace(Visitor* visitor)
 {
     Body::trace(visitor);
     visitor->trace(m_request);
     visitor->trace(m_headers);
 }
 
 } // namespace blink