GitLab

The recursive prefetch token is generated from the browser process,
passed to the renderer process and then back to the browser process.

This crashes the renderer in response to a request with an incorrectly
set recursive prefetch token.

Bug: 1123715
Change-Id: Ia6e627de66566a506b44d31b93e65d4acf07e27b
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2421597Reviewed-by: Dominic Farolino <dom@chromium.org>
Reviewed-by: Kinuko Yasuda <kinuko@chromium.org>
Commit-Queue: Mugdha Lakhani <nator@chromium.org>
Cr-Commit-Position: refs/heads/master@{#810729}