commit eff8e457298d01b437e4fd78194ad6de3c8d7ad6
author lukasza <lukasza@chromium.org> Wed Jul 27 21:03:26 2016
committer Commit bot <commit-bot@chromium.org> Wed Jul 27 21:04:57 2016
tree 59f2bcb5a2cb6bdd5f863d744660892f357ac192
parent 7a781febaa300c393834395f6783b2640e75f5a0

Resource requests from Save-Page-As should go through CanRequestURL checks.

This CL:

- Added checks to ResourceDispatcherHostImpl::BeginSaveFile to verify if
  the renderer process is authorized to access a given resource.

- Removed separate code path for file: URIs that used to be implemented
  in SaveFileManager::SaveLocalFile.  Avoiding a separate code path
  helps consolidate all authorization checks in one place.

BUG=616429

Review-Url: https://codereview.chromium.org/2075273002
Cr-Commit-Position: refs/heads/master@{#408235}