Sanitize referrers before we create them

components/navigation_interception/intercept_navigation_resource_throttle.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "components/navigation_interception/intercept_navigation_resource_throttle.h"
 
 #include "components/navigation_interception/navigation_params.h"
 #include "content/public/browser/browser_thread.h"
 #include "content/public/browser/child_process_security_policy.h"
 #include "content/public/browser/render_frame_host.h"
@@ skipping 99 matching lines @@
     return false;
 
   int render_process_id, render_frame_id;
   if (!info->GetAssociatedRenderFrame(&render_process_id, &render_frame_id))
     return false;
 
   bool is_external_protocol =
       !info->GetContext()->GetRequestContext()->job_factory()->IsHandledURL(
           url);
   NavigationParams navigation_params(
-      url, Referrer(GURL(request_->referrer()), info->GetReferrerPolicy()),
+      url,
+      Referrer::SanitizeForRequest(
+          url, Referrer(GURL(request_->referrer()), info->GetReferrerPolicy())),
       info->HasUserGesture(), method == "POST", info->GetPageTransition(),
       is_redirect, is_external_protocol);
 
   BrowserThread::PostTask(
       BrowserThread::UI,
       FROM_HERE,
       base::Bind(
           &CheckIfShouldIgnoreNavigationOnUIThread,
           render_process_id,
           render_frame_id,
@@ skipping 13 matching lines @@
   DCHECK(BrowserThread::CurrentlyOn(BrowserThread::IO));
 
   if (should_ignore_navigation) {
     controller()->CancelAndIgnore();
   } else {
     controller()->Resume();
   }
 }
 
 }  // namespace navigation_interception