Update net::HttpUtil::IsSafeHeader() with two new headers

net/http/http_util_unittest.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include <algorithm>
 
 #include "base/basictypes.h"
 #include "base/string_util.h"
 #include "net/http/http_util.h"
 #include "testing/gtest/include/gtest/gtest.h"
 
 using net::HttpUtil;
 
 namespace {
 class HttpUtilTest : public testing::Test {};
 }
 
 TEST(HttpUtilTest, IsSafeHeader) {
   static const char* unsafe_headers[] = {
     "sec-",
     "sEc-",
     "sec-foo",
     "sEc-FoO",
     "proxy-",
     "pRoXy-",
     "proxy-foo",
     "pRoXy-FoO",
     "accept-charset",
     "accept-encoding",
+    "access-control-request-headers",
+    "access-control-request-method",
     "connection",
     "content-length",
     "cookie",
     "cookie2",
     "content-transfer-encoding",
     "date",
     "expect",
     "host",
     "keep-alive",
     "origin",
@@ skipping 14 matching lines @@
   static const char* safe_headers[] = {
     "foo",
     "x-",
     "x-foo",
     "content-disposition",
     "update",
     "accept-charseta",
     "accept_charset",
     "accept-encodinga",
     "accept_encoding",
+    "access-control-request-headersa",
+    "access-control-request-header",
+    "access_control_request_header",
+    "access-control-request-methoda",
+    "access_control_request_method",
     "connectiona",
     "content-lengtha",
     "content_length",
     "cookiea",
     "cookie2a",
     "cookie3",
     "content-transfer-encodinga",
     "content_transfer_encoding",
     "datea",
     "expecta",
@@ skipping 968 matching lines @@
 TEST(HttpUtilTest, NameValuePairsIteratorMissingEndQuote) {
   std::string data = "name='value";
   HttpUtil::NameValuePairsIterator parser(data.begin(), data.end(), ';');
   EXPECT_TRUE(parser.valid());
 
   ASSERT_NO_FATAL_FAILURE(
       CheckNextNameValuePair(&parser, true, true, "name", "value"));
   ASSERT_NO_FATAL_FAILURE(
       CheckNextNameValuePair(&parser, false, true, "", ""));
 }