tree 077c4251eb5e04e7d14bc2239e6f75f3c9951a43
parent f385bd90c3546bdac2f82a945bf36868bdd158bb
author Matt Menke <mmenke@chromium.org> 1560819961 +0000
committer Commit Bot <commit-bot@chromium.org> 1560819961 +0000

Restrict setting some network headers through URLLoader interface.

The restricted headers potentially give Chrome and the server its
talking different views of what's going on for the rest of a
transaction, so it isn't a great idea to allow setting them.

Proxy headers are also restricted.

Bug: 973103
Change-Id: Id014181a332252d908c6255cc7c2593a4be781f4
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/1659194
Reviewed-by: Bill Budge <bbudge@chromium.org>
Reviewed-by: Asanka Herath <asanka@chromium.org>
Commit-Queue: Matt Menke <mmenke@chromium.org>
Cr-Original-Commit-Position: refs/heads/master@{#669924}
Cr-Mirrored-From: https://chromium.googlesource.com/chromium/src
Cr-Mirrored-Commit: eb88b44f8e65531bf5a7176bacd3088af7a75fce