<browser>: Always read <browser>.src attribute from <object>.src.

content/renderer/browser_plugin/browser_plugin.cc

Index: content/renderer/browser_plugin/browser_plugin.cc
diff --git a/content/renderer/browser_plugin/browser_plugin.cc b/content/renderer/browser_plugin/browser_plugin.cc
index adde725e61b83c614b638541935b9a737c56661b..13abce5a07477270ce9ddf26fd3d866244db5fa7 100644
--- a/content/renderer/browser_plugin/browser_plugin.cc
+++ b/content/renderer/browser_plugin/browser_plugin.cc
@@ -136,7 +136,8 @@ void BrowserPlugin::SetSrcAttribute(const std::string& src) {
     // cannot be changed, so this value is used for enforcing this.
     navigate_src_sent_ = true;
   }
-  src_ = src;
+  if (!src.empty())

[Fady Samuel, 2012/10/12 18:54:44]

Hmm, do we want to continue doing the rest of BrowserPlugin::SetSrcAttribute if
src.empty()? Maybe exit early instead?

[lazyboy, 2012/10/12 19:16:18]

I think we need to send the resize params above otherwise we need to start
re-doing src setting flow, so it's less brittle to do it here; I've added return
from here, let me know if that's good.

+    src_ = src;
   guest_crashed_ = false;
 }