Don't autofill credit cards on non-secure pages

android_webview/native/aw_autofill_client.cc

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "android_webview/native/aw_autofill_client.h"
 
 #include "android_webview/browser/aw_browser_context.h"
 #include "android_webview/browser/aw_content_browser_client.h"
 #include "android_webview/browser/aw_form_database_service.h"
 #include "android_webview/browser/aw_pref_store.h"
@@ skipping 162 matching lines @@
 
 void AwAutofillClient::OnFirstUserGestureObserved() {
   NOTIMPLEMENTED();
 }
 
 void AwAutofillClient::LinkClicked(const GURL& url,
                                    WindowOpenDisposition disposition) {
   NOTIMPLEMENTED();
 }
 
+bool AwAutofillClient::IsContextSecure(const GURL& form_origin) {
+  // TODO (sigbjorn): Return if the context is secure, not just

[boliu, 2015/06/30 16:20:06]

Android webview can use the same implementation as chrome I think?

If ios can do the same thing, then a better api would be to have the client
return SSLStatus. Then most of the implementation can be shared in the autofill
component.

[sigbjorn, 2015/07/01 07:28:14]

Good point. Perhaps bondd can answer this question? Can iOS in
AutofillClientIOS::IsContextSecure access the SSLStatus of the form's page? (If
so, could you assist with code to do so?)

+  // the form_origin. See crbug.com/505390
+  return form_origin.SchemeIsCryptographic();
+}
+
 void AwAutofillClient::SuggestionSelected(JNIEnv* env,
                                           jobject object,
                                           jint position) {
   if (delegate_) {
     delegate_->DidAcceptSuggestion(suggestions_[position].value,
                                    suggestions_[position].frontend_id,
                                    position);
   }
 }
 
@@ skipping 33 matching lines @@
     content::RenderFrameHost* rfh,
     const ResultCallback& callback) {
   NOTIMPLEMENTED();
 }
 
 bool RegisterAwAutofillClient(JNIEnv* env) {
   return RegisterNativesImpl(env);
 }
 
 }  // namespace android_webview