Sanitize referrers before we create them

components/pdf/renderer/ppb_pdf_impl.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "components/pdf/renderer/ppb_pdf_impl.h"
 
 #include "base/files/scoped_file.h"
 #include "base/metrics/histogram.h"
 #include "base/numerics/safe_conversions.h"
 #include "base/strings/utf_string_conversions.h"
@@ skipping 224 matching lines @@
 void SaveAs(PP_Instance instance_id) {
   content::PepperPluginInstance* instance =
       content::PepperPluginInstance::Get(instance_id);
   if (!instance)
     return;
   GURL url = instance->GetPluginURL();
 
   content::RenderView* render_view = instance->GetRenderView();
   blink::WebLocalFrame* frame =
       render_view->GetWebView()->mainFrame()->toWebLocalFrame();
-  content::Referrer referrer(frame->document().url(),
-                             frame->document().referrerPolicy());
+  content::Referrer referrer = content::Referrer::SanitizeForRequest(
+      url, content::Referrer(frame->document().url(),
+                             frame->document().referrerPolicy()));
   render_view->Send(
       new PDFHostMsg_PDFSaveURLAs(render_view->GetRoutingID(), url, referrer));
 }
 
 void Print(PP_Instance instance) {
   PPB_PDF_Impl::InvokePrintingForInstance(instance);
 }
 
 PP_Bool IsFeatureEnabled(PP_Instance instance, PP_PDFFeature feature) {
   switch (feature) {
@@ skipping 116 matching lines @@
 bool PPB_PDF_Impl::InvokePrintingForInstance(PP_Instance instance_id) {
   return g_print_client ? g_print_client->Print(instance_id) : false;
 }
 
 void PPB_PDF_Impl::SetPrintClient(PPB_PDF_Impl::PrintClient* client) {
   CHECK(!g_print_client) << "There should only be a single PrintClient.";
   g_print_client = client;
 }
 
 }  // namespace pdf