Sanitize referrers before we create them

chrome/browser/extensions/extension_web_ui.cc

Index: chrome/browser/extensions/extension_web_ui.cc
diff --git a/chrome/browser/extensions/extension_web_ui.cc b/chrome/browser/extensions/extension_web_ui.cc
index 166b8a81cb7d325753e21dffb09770cebf15eeef..304875698d93e8f5242a3440676cca08f7d1c1ca 100644
--- a/chrome/browser/extensions/extension_web_ui.cc
+++ b/chrome/browser/extensions/extension_web_ui.cc
@@ -80,7 +80,8 @@ void UnregisterAndReplaceOverrideForWebContents(const std::string& page,
   // Don't use Reload() since |url| isn't the same as the internal URL that
   // NavigationController has.
   web_contents->GetController().LoadURL(
-      url, content::Referrer(url, blink::WebReferrerPolicyDefault),
+      url, content::Referrer::SanitizeForRequest(

[Mike West, 2015/02/09 11:07:38]

Nit: Might be worth creating a static helper that avoids the necessity for
creating a referrer and sanitizing it in two steps. `::CreateSanitizedReferrer`
or something.

[jochen (gone - plz use gerrit), 2015/02/09 12:00:02]

dunno, I'd be surprised if the Referrer ctor is not inlined on every
platform/compiler

+               url, content::Referrer(url, blink::WebReferrerPolicyDefault)),
       ui::PAGE_TRANSITION_RELOAD, std::string());
 }