Support whitelisting to handle insecure origins as trustworthy origins (chromium)

chrome/common/origin_util_unittest.cc

 // Copyright (c) 2015 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/common/origin_util.h"
 
+#include "base/command_line.h"
+#include "chrome/common/chrome_switches.h"
 #include "testing/gtest/include/gtest/gtest.h"
 #include "url/gurl.h"
 
 TEST(URLSchemesTest, IsOriginSecure) {
   EXPECT_TRUE(IsOriginSecure(GURL("file:///test/fun.html")));
   EXPECT_TRUE(IsOriginSecure(GURL("file:///test/")));
 
   EXPECT_TRUE(IsOriginSecure(GURL("https://example.com/fun.html")));
   EXPECT_FALSE(IsOriginSecure(GURL("http://example.com/fun.html")));
 
@@ skipping 18 matching lines @@
       IsOriginSecure(GURL("http://[::1].example.com/fun.html")));
 
   EXPECT_FALSE(IsOriginSecure(
       GURL("filesystem:http://www.example.com/temporary/")));
   EXPECT_FALSE(IsOriginSecure(
       GURL("filesystem:ftp://www.example.com/temporary/")));
   EXPECT_TRUE(IsOriginSecure(
       GURL("filesystem:ftp://127.0.0.1/temporary/")));
   EXPECT_TRUE(IsOriginSecure(
       GURL("filesystem:https://www.example.com/temporary/")));
+
+  // Add http://example.com and http://127.example.com to whitelist and
+  // check if they are now considered secure origins.
+  ClearWhiteListedSecureOrigins();
+  base::CommandLine* command_line = base::CommandLine::ForCurrentProcess();
+  command_line->AppendSwitchASCII(
+      switches::kUnsafetyTreatInsecureOriginAsSecure,
+      "http://example.com,http://127.example.com");
+  command_line->AppendSwitch(switches::kUserDataDir);
+  EXPECT_TRUE(IsOriginSecure(GURL("http://example.com/fun.html")));
+  EXPECT_TRUE(IsOriginSecure(GURL("http://127.example.com/fun.html")));
+  ClearWhiteListedSecureOrigins();
 }