When PlzNavigate is **disabled**, when a request is blocked on a redirect, the ResourceMsg_ReceivedRedirect message is never sent, only ResourceMsg_RequestComplete is sent. Hence the renderer never learns of the redirect, so the provisional load fails on the renderer side with the pre-redirect URL.
This means that the error page is also committed under the pre-redirect URL,
which causes a mismatch in TakeNavigationHandleForCommit, because the NavigationHandle already has the post-redirect URL.
It is not a problem for now since there is no NavigationThrottle that will block a Navigation on a redirect with an error code different of ERR_ABORTED.
It is blocking:
https://codereview.chromium.org/2632633006/
https://codereview.chromium.org/2698623006/
Comment 1 by bugdroid1@chromium.org
, Mar 16 2017