Export shouldTreatURLSchemeAsSecure.

public/web/WebSecurityPolicy.h

 /*
  * Copyright (C) 2009 Google Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions are
  * met:
  *
  *     * Redistributions of source code must retain the above copyright
  * notice, this list of conditions and the following disclaimer.
  *     * Redistributions in binary form must reproduce the above
@@ skipping 43 matching lines @@
     // Registers a URL scheme to be treated as display-isolated. This means
     // that pages cannot display these URLs unless they are from the same
     // scheme. For example, pages in other origin cannot create iframes or
     // hyperlinks to URLs with the scheme.
     BLINK_EXPORT static void registerURLSchemeAsDisplayIsolated(const WebString&);
 
     // Registers a URL scheme to generate mixed content warnings when resources whose
     // schemes are not registered as "secure" are embedded.
     BLINK_EXPORT static void registerURLSchemeAsRestrictingMixedContent(const WebString&);
 
-    // Registers a URL scheme to not generate mixed content warnings when
-    // included by page whose scheme is registed as restricting mixed content.
+    // Subresources transported by secure schemes do not trigger mixed content
+    // warnings. For example, https and data are secure schemes because they
+    // cannot be corrupted by active network attackers.
     BLINK_EXPORT static void registerURLSchemeAsSecure(const WebString&);
 
+    // Returns true if the scheme has been registered as a secure scheme.
+    BLINK_EXPORT static bool shouldTreatURLSchemeAsSecure(const WebString&);
+
     // Registers a non-HTTP URL scheme which can be sent CORS requests.
     BLINK_EXPORT static void registerURLSchemeAsCORSEnabled(const WebString&);
 
     // Registers a URL scheme whose resources can be loaded regardless of a page's Content Security Policy.
     BLINK_EXPORT static void registerURLSchemeAsBypassingContentSecurityPolicy(const WebString&);
 
     // Registers a URL scheme for which some kinds of resources bypass Content Security Policy.
     // This enum should be kept in sync with Source/platform/weborigin/SchemeRegistry.h.
     // Enforced in AssertMatchingEnums.cpp.
     enum PolicyAreas : uint32_t {
@@ skipping 27 matching lines @@
     // by bookmarklets or javascript: URLs typed in the omnibox.
     BLINK_EXPORT static void registerURLSchemeAsNotAllowingJavascriptURLs(const WebString&);
 
 private:
     WebSecurityPolicy();
 };
 
 } // namespace blink
 
 #endif