Sanitize referrers before we create them

chrome/browser/extensions/webstore_installer.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/extensions/webstore_installer.h"
 
 #include <set>
 #include <vector>
 
 #include "base/basictypes.h"
@@ skipping 631 matching lines @@
       contents->GetRenderViewHost()->GetRoutingID();
   content::ResourceContext* resource_context =
       controller.GetBrowserContext()->GetResourceContext();
   scoped_ptr<DownloadUrlParameters> params(new DownloadUrlParameters(
       download_url_,
       render_process_host_id,
       render_view_host_routing_id ,
       resource_context));
   params->set_file_path(file);
   if (controller.GetVisibleEntry())
-    params->set_referrer(
-        content::Referrer(controller.GetVisibleEntry()->GetURL(),
-                          blink::WebReferrerPolicyDefault));
+    params->set_referrer(content::Referrer::SanitizeForRequest(
+        download_url_, content::Referrer(controller.GetVisibleEntry()->GetURL(),
+                                         blink::WebReferrerPolicyDefault)));
   params->set_callback(base::Bind(&WebstoreInstaller::OnDownloadStarted,
                                   this,
                                   extension_id));
   download_manager->DownloadUrl(params.Pass());
 }
 
 void WebstoreInstaller::UpdateDownloadProgress() {
   // If the download has gone away, or isn't in progress (in which case we can't
   // give a good progress estimate), stop any running timers and return.
   if (!download_item_ ||
@@ skipping 96 matching lines @@
         1,
         kMaxSizeKb,
         kNumBuckets);
   }
   UMA_HISTOGRAM_BOOLEAN(
       "Extensions.WebstoreDownload.InterruptTotalSizeUnknown",
       total_bytes <= 0);
 }
 
 }  // namespace extensions