From f30086ed6f38bf3c6fcc2b2b78c2cc161a02ba3d Mon Sep 17 00:00:00 2001
From: Francois Marier <francois@brave.com>
Date: Wed, 27 Mar 2019 13:49:10 -0700
Subject: [PATCH] Remove source and referrer URLs from download metadata

This fixes brave/brave-browser#2766 by making the download
metadata the same whether it's coming from normal, private or Tor
windows.
---
 ...ad-internal-common-download_item_impl.cc.patch | 15 +++++++++++++++
 1 file changed, 15 insertions(+)
 create mode 100644 patches/components-download-internal-common-download_item_impl.cc.patch

diff --git a/patches/components-download-internal-common-download_item_impl.cc.patch b/patches/components-download-internal-common-download_item_impl.cc.patch
new file mode 100644
index 000000000000..9a9438d1960b
--- /dev/null
+++ b/patches/components-download-internal-common-download_item_impl.cc.patch
@@ -0,0 +1,15 @@
+diff --git a/components/download/internal/common/download_item_impl.cc b/components/download/internal/common/download_item_impl.cc
+index 4b536f504a4cd61aefb1efcc42e5de801586d62b..24c153bd00a14d6215ff5798f290e7845b328c2c 100644
+--- a/components/download/internal/common/download_item_impl.cc
++++ b/components/download/internal/common/download_item_impl.cc
+@@ -1680,8 +1680,8 @@ void DownloadItemImpl::OnDownloadCompleting() {
+                      base::Unretained(download_file_.get()),
+                      GetTargetFilePath(),
+                      delegate_->GetApplicationClientIdForFileScanning(),
+-                     delegate_->IsOffTheRecord() ? GURL() : GetURL(),
+-                     delegate_->IsOffTheRecord() ? GURL() : GetReferrerUrl(),
++                     GURL(),  // Never leak download URLs in metadata.
++                     GURL(),  // See brave-browser#2766.
+                      std::move(callback)));
+ }
+