Android: Disallow iframes from requesting to auto-log-in.

chrome/browser/renderer_host/chrome_resource_dispatcher_host_delegate.cc

Index: chrome/browser/renderer_host/chrome_resource_dispatcher_host_delegate.cc
diff --git a/chrome/browser/renderer_host/chrome_resource_dispatcher_host_delegate.cc b/chrome/browser/renderer_host/chrome_resource_dispatcher_host_delegate.cc
index 88e6de79f0757ac77a035ba15220b4a71864d52d..cf5e5d6dfc8cc6e1c299b8b52090aa1e2063b596 100644
--- a/chrome/browser/renderer_host/chrome_resource_dispatcher_host_delegate.cc
+++ b/chrome/browser/renderer_host/chrome_resource_dispatcher_host_delegate.cc
@@ -642,8 +642,10 @@ void ChromeResourceDispatcherHostDelegate::OnResponseStarted(
   // See if the response contains the X-Auto-Login header.  If so, this was
   // a request for a login page, and the server is allowing the browser to
   // suggest auto-login, if available.
-  AutoLoginPrompter::ShowInfoBarIfPossible(request, info->GetChildID(),
-                                           info->GetRouteID());
+  if (info->IsMainFrame()) {
+    AutoLoginPrompter::ShowInfoBarIfPossible(request, info->GetChildID(),
+                                             info->GetRouteID());
+  }
 #endif
 
   ProfileIOData* io_data = ProfileIOData::FromResourceContext(resource_context);