Permit NTLM token on cross-domain images.
The change in http://crrev.com/209100 is too general; this makes
the effects specific to embedded identities.
BUG=303046
[email protected]
Review URL: https://codereview.chromium.org/26745002
git-svn-id: svn://svn.chromium.org/chrome/trunk/src@228087 0039d316-1c4b-4281-b951-d872f2087c98
diff --git a/net/http/http_network_transaction.cc b/net/http/http_network_transaction.cc
index 707751a..b64002f4 100644
--- a/net/http/http_network_transaction.cc
+++ b/net/http/http_network_transaction.cc
@@ -735,12 +735,15 @@
int HttpNetworkTransaction::DoGenerateServerAuthToken() {
next_state_ = STATE_GENERATE_SERVER_AUTH_TOKEN_COMPLETE;
HttpAuth::Target target = HttpAuth::AUTH_SERVER;
- if (!auth_controllers_[target].get())
+ if (!auth_controllers_[target].get()) {
auth_controllers_[target] =
new HttpAuthController(target,
AuthURL(target),
session_->http_auth_cache(),
session_->http_auth_handler_factory());
+ if (request_->load_flags & LOAD_DO_NOT_USE_EMBEDDED_IDENTITY)
+ auth_controllers_[target]->DisableEmbeddedIdentity();
+ }
if (!ShouldApplyServerAuth())
return OK;
return auth_controllers_[target]->MaybeGenerateAuthToken(request_,
