Create the Referrer in the receiver instead, using the URL and
ReferrerPolicy as input. Since the receiver is more trustworthy, this
eliminates the following potential issues:
- Sender forgetting to do Referrer sanitization.
- Sender sending different URL and refererer URL.
This also remove a dependency on Blink, and the GN visibility exception
that was needed for the dependency.
Change-Id: I5c7d14a3e23e0ff22af2509c1daa5d10cca6f0b1
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2964337
Reviewed-by: Tom Sepez <tsepez@chromium.org>
Reviewed-by: Hui Yingst <nigi@chromium.org>
Reviewed-by: Noel Gordon <noel@chromium.org>
Commit-Queue: Lei Zhang <thestig@chromium.org>
Cr-Commit-Position: refs/heads/master@{#893088}
ad5a30ba37