HTML Imports: Teach preloader about HTML Imports.

Source/core/html/parser/PreloadRequest.cpp

 // Copyright 2015 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "config.h"
 #include "core/html/parser/PreloadRequest.h"
 
 #include "core/dom/Document.h"
 #include "core/fetch/FetchInitiatorInfo.h"
 
@@ skipping 13 matching lines @@
 }
 
 FetchRequest PreloadRequest::resourceRequest(Document* document)
 {
     ASSERT(isMainThread());
     FetchInitiatorInfo initiatorInfo;
     initiatorInfo.name = AtomicString(m_initiatorName);
     initiatorInfo.position = m_initiatorPosition;
     FetchRequest request(ResourceRequest(completeURL(document)), initiatorInfo);
 
+    if (m_resourceType == Resource::ImportResource) {
+        SecurityOrigin* securityOrigin = document->contextDocument()->securityOrigin();
+        bool sameOrigin = securityOrigin->canRequest(request.url());
+        request.setCrossOriginAccessControl(securityOrigin,
+            sameOrigin ? AllowStoredCredentials : DoNotAllowStoredCredentials,
+            ClientDidNotRequestCredentials);
+    }
+

[Yoav Weiss, 2015/06/11 10:50:47]

OK, so that corresponds to
http://w3c.github.io/webcomponents/spec/imports/#fetching-import step 3?

Mike, can you make sure that this makes sense?

[Mike West, 2015/06/12 07:33:04]

How does this deal with redirects? Otherwise it looks reasonable.

[yoichio, 2015/06/16 05:13:09]

CrossOriginAccessControl::handleRedirect also takes care of ridirected preload
requests.

http/tests/htmlimports/redirect.html tests redirect and now the all imports in
the test are preloaded.

     if (m_isCORSEnabled)
         request.setCrossOriginAccessControl(document->securityOrigin(), m_allowCredentials);
 
     request.setDefer(m_defer);
     request.setResourceWidth(m_resourceWidth);
     request.setClientHintsPreferences(m_clientHintsPreferences);
 
     return request;
 }
 
 }