Restrict setting some network headers through URLLoader interface.
The restricted headers potentially give Chrome and the server its
talking different views of what's going on for the rest of a
transaction, so it isn't a great idea to allow setting them.
Proxy headers are also restricted.
Reviewed-by: Bill Budge <email@example.com>
Reviewed-by: Asanka Herath <firstname.lastname@example.org>
Commit-Queue: Matt Menke <email@example.com>
1 file changed