Skip the Service Worker CORS fallback for same origin requests. [1/2 blink]
We are sending CORS fallback response from the browser process to the page's renderer process, when the ServiceWorker doesn't handle the CORS fetch request.
But when the request URL's origin is same as the page's security origin, we can skip the fallback and send the request from the browser process.
This cl only changes ASSERT() in DocumentThreadableLoader.
This cl adds "securityOrigin()->canRequest(m_fallbackRequestForServiceWorker->url())" in ASSERT().
It is OK because:
- The document which origin is an unique origin can't be controlled by Service Worker.
- Whenever "provider_host_->document_url().GetOrigin() == request()->url().GetOrigin()" is true at ServiceWorkerURLRequestJob::DidDispatchFetchEvent(), canRequest() must be true here.
1/2 blink: this cl.
2/2 chromium: https://codereview.chromium.org/1242953007/
BUG=512764
Review URL: https://codereview.chromium.org/1243353002
git-svn-id: svn://svn.chromium.org/blink/trunk@199655 bbb929c8-8fbe-4397-9dbb-9b2b20218538
1 file changed
