Preserve referrer across CORS-enabled redirects

When following a CORS-enabled redirect in DocumentThreadableLoader, use
the previous leg's referrer as the starting point instead of the
document's URL. This matches the Referrer Policy spec and ensures that
information is never added to the referrer when following a
redirect. (In other words, if the referrer is stripped in one leg of a
request, it will not be re-created in a subsequent leg.)

BUG=628457

Review-Url: https://codereview.chromium.org/2151693009
Cr-Commit-Position: refs/heads/master@{#406289}
5 files changed