commit 898f60fea38ac6df154b23575aa840a54a4bc3f5
author Kristina Nelson <krstnmnlsn@google.com> Fri Jul 12 01:53:25 2019
committer Commit Bot <commit-bot@chromium.org> Fri Jul 12 01:53:25 2019
tree 7f53e55a147f63492fa78102ae375ce7ba6d85d1
parent aae00ee3e170c69bf71c0ebea425fb7cd65b4d26

Adding CORB protection UMA metrics (part 4): Sniffing!

With this change sensitive resources (i.e. resources satisfying either
the CORS or cache heuristics) will be sniffed if necessary when we
check if they would have been protected from cross-origin requests.
Previously if sniffing was needed we simply reported kNeedToSniffMore.

Note that this change will result in CORB sniffing additional
resources. However only sensitive, same-origin resources will be
impacted. Additionally, this change includes a CORBProtectionSniffing
feature which will act as a kill-switch in the event we need to quickly
turn off this additional sniffing.


Bug: 815290
Change-Id: I32ee946176e00df329542f26244b25eb6596fd3f
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/1680988
Reviewed-by: Reilly Grant <reillyg@chromium.org>
Reviewed-by: Charlie Reis <creis@chromium.org>
Reviewed-by: Łukasz Anforowicz <lukasza@chromium.org>
Commit-Queue: Kristina Nelson <krstnmnlsn@google.com>
Cr-Commit-Position: refs/heads/master@{#676699}