GitLab

When request origin is specified, verify that it is localhost or an
explicitly whitelisted ip address. This protects against cross-domain
attacks and header spoofing.

Bug: 1045787
Change-Id: I65336d77e29ed0dec775bf4db40f0a274c03bcb4
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2090305
Commit-Queue: Tricia Crichton <triciac@chromium.org>
Reviewed-by: John Chen <johnchen@chromium.org>
Cr-Commit-Position: refs/heads/master@{#749369}