Add IsOriginSecure and GURL::SchemeUsesTLS.

content/common/url_schemes.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "content/common/url_schemes.h"
 
 #include <string.h>
 
 #include <algorithm>
 #include <string>
 #include <vector>
 
 #include "base/basictypes.h"
 #include "base/strings/string_util.h"
+#include "base/strings/utf_string_conversions.h"
 #include "content/common/savable_url_schemes.h"
 #include "content/public/common/content_client.h"
 #include "content/public/common/url_constants.h"
+#include "net/base/net_util.h"
+#include "third_party/WebKit/public/platform/WebString.h"
+#include "third_party/WebKit/public/web/WebSecurityPolicy.h"
+#include "url/gurl.h"
 #include "url/url_util.h"
 
 namespace {
 
 void AddStandardSchemeHelper(const std::string& scheme) {
   url::AddStandardScheme(scheme.c_str());
 }
 
 }  // namespace
 
@@ skipping 39 matching lines @@
     for (int i = 0; i < schemes; ++i) {
       savable_schemes[default_schemes_count + i] =
           base::strdup(additional_savable_schemes[i].c_str());
     }
     savable_schemes[default_schemes_count + schemes] = 0;
 
     SetSavableSchemes(savable_schemes);
   }
 }
 
+bool IsOriginSecure(const GURL& url) {
+  if (url.SchemeIsSecure())
+    return true;
+
+  std::string hostname = url.host();
+  if (net::IsLocalhost(hostname) || net::IsLocalhostTLD(hostname))
+    return true;
+
+  blink::WebString scheme(base::ASCIIToUTF16(url.scheme()));
+  if (blink::WebSecurityPolicy::shouldTreatURLSchemeAsSecure(scheme))

[tkent, 2015/04/05 22:31:38]

Does this code run in the browser process?  If so, we should not use
WebSecurityPolicy here.  It has a lot of side effects.

+    return true;
+
+  return false;
+}
+
 }  // namespace content