Redact onion origins from Location.ancestorOrigins.

Open a new Issue

Per #44731 (comment 3363849), we want to hide .onion origins from the location.ancestorOrigins array.

Since the spec already uses the frame's referrer policy to decide whether redacting origins (i.e. the privacy concern is not exposing ancestors which opted-out sending their referrer to the sub-document by signaling via referrerpolicy attribute) and we already "redact" cross-origin .onion referrers if network.http.referer.hideOnionSource is true (default), we'll use the same criteria here: more specifically, on top of the current redaction algorithm, we're gonna redact also any .onion ancestor which is cross-origin with the current document.