service worker: Don't control a subframe of an insecure context

third_party/WebKit/Source/platform/weborigin/SecurityOrigin.cpp

 /*
  * Copyright (C) 2007 Apple Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions
  * are met:
  *
  * 1.  Redistributions of source code must retain the above copyright
  *     notice, this list of conditions and the following disclaimer.
  * 2.  Redistributions in binary form must reproduce the above copyright
@@ skipping 341 matching lines @@
 
     if (SchemeRegistry::shouldTreatURLSchemeAsSecure(m_protocol) || isLocal() || isLocalhost())
         return true;
 
     if (SecurityPolicy::isOriginWhiteListedTrustworthy(*this))
         return true;
 
     return false;
 }
 
+bool SecurityOrigin::isPotentiallyTrustworthy(String* errorMessage) const
+{
+    if (isPotentiallyTrustworthy())
+        return true;
+    if (errorMessage)
+        *errorMessage = isPotentiallyTrustworthyErrorMessage();
+    return false;
+}
+
 // static
 String SecurityOrigin::isPotentiallyTrustworthyErrorMessage()
 {
     return "Only secure origins are allowed (see: https://goo.gl/Y0ZkNV).";
 }
 
 void SecurityOrigin::grantLoadLocalResources()
 {
     // Granting privileges to some, but not all, documents in a SecurityOrigin
     // is a security hazard because the documents without the privilege can
@@ skipping 203 matching lines @@
     m_blockLocalAccessFromLocalOrigin = privilegeData->m_blockLocalAccessFromLocalOrigin;
 }
 
 void SecurityOrigin::setUniqueOriginIsPotentiallyTrustworthy(bool isUniqueOriginPotentiallyTrustworthy)
 {
     ASSERT(!isUniqueOriginPotentiallyTrustworthy || isUnique());
     m_isUniqueOriginPotentiallyTrustworthy = isUniqueOriginPotentiallyTrustworthy;
 }
 
 } // namespace blink