Update net::HttpUtil::IsSafeHeader() with two new headers

chrome/test/data/extensions/api_test/downloads/test.js

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // downloads api test
 // browser_tests.exe --gtest_filter=DownloadsApiTest.Downloads
 
 // Comment this out to enable debugging.
 console.debug = function() {};
 
@@ skipping 676 matching lines @@
     },
 
     function downloadHeadersInvalid22() {
       // Test that we disallow certain headers.
       downloads.download(
           {'url': SAFE_FAST_URL,
            'headers': [{'name': 'oRiGiN', 'value': 'evil'}]},
           chrome.test.callbackFail(downloads.ERROR_GENERIC));
     },
 
-    // TODO(benjhayden): Find why these aren't caught by
-    // net::HttpUtil::IsSafeHeader().
-    // function downloadHeadersInvalid23() {
-    //   // Test that we disallow certain headers.
-    //   downloads.download(
-    //       {'url': SAFE_FAST_URL,
-    //        'headers': [{'name': 'Access-Control-Request-Headers',
-    //                     'value': 'evil'}]},
-    //       chrome.test.callbackFail(downloads.ERROR_GENERIC));
-    // },
+    function downloadHeadersInvalid23() {
+      // Test that we disallow certain headers.
+      downloads.download(
+          {'url': SAFE_FAST_URL,
+           'headers': [{'name': 'Access-Control-Request-Headers',
+                        'value': 'evil'}]},
+          chrome.test.callbackFail(downloads.ERROR_GENERIC));
+    },
 
-    // function downloadHeadersInvalid24() {
-    //   // Test that we disallow certain headers.
-    //   downloads.download(
-    //       {'url': SAFE_FAST_URL,
-    //        'headers': [{'name': 'Access-Control-Request-Method',
-    //                     'value': 'evil'}]},
-    //       chrome.test.callbackFail(downloads.ERROR_GENERIC));
-    // },
+    function downloadHeadersInvalid24() {
+      // Test that we disallow certain headers.
+      downloads.download(
+          {'url': SAFE_FAST_URL,
+           'headers': [{'name': 'Access-Control-Request-Method',
+                        'value': 'evil'}]},
+          chrome.test.callbackFail(downloads.ERROR_GENERIC));
+    },
 
     function downloadInterrupted() {
       // Test that cancel()ing an in-progress download causes its state to
       // transition to interrupted, and test that that state transition is
       // detectable by an onChanged event listener.
       // TODO(benjhayden): Test other sources of interruptions such as server
       // death.
       var downloadId = getNextId();
       console.debug(downloadId);
 
@@ skipping 335 matching lines @@
     },
 
     function callNotifyPass() {
       chrome.test.notifyPass();
       setTimeout(chrome.test.callback(function() {
         console.debug('');
       }), 0);
     }
   ]);
 });