Add IsOriginSecure and GURL::SchemeUsesTLS.

content/public/common/origin_util.cc

+// Copyright (c) 2015 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#include "content/public/common/origin_util.h"
+
+#include <string.h>
+
+#include "content/public/common/url_constants.h"
+#include "net/base/net_util.h"
+#include "url/gurl.h"
+
+namespace content {
+
+bool IsOriginSecure(const GURL& url) {
+  if (url.SchemeUsesTLS() || url.SchemeIsFile())
+    return true;
+  if (url.SchemeIsFileSystem() && url.inner_url() &&
+      url.inner_url()->SchemeIsSecure()) {

[davidben, 2015/04/08 20:31:00]

This should be IsOriginSecure(url.inner_url()), right? Though even that is
tricky because of chrome::IsOriginSecure.

+    return true;
+  }
+
+  std::string hostname = url.HostNoBrackets();
+  if (net::IsLocalhost(hostname) || net::IsLocalhostTLD(hostname))
+    return true;
+
+  std::string scheme = url.scheme();
+  if (scheme == content::kChromeUIScheme)
+    return true;
+
+  return false;
+}
+
+}  // namespace content