Limit foreign fetch to only intercept requests made from secure contexts.

content/child/request_extra_data.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CONTENT_CHILD_REQUEST_EXTRA_DATA_H_
 #define CONTENT_CHILD_REQUEST_EXTRA_DATA_H_
 
 #include <utility>
 
 #include "base/compiler_specific.h"
@@ skipping 114 matching lines @@
   // navigation requests.
   std::unique_ptr<StreamOverrideParameters> TakeStreamOverrideOwnership() {
     return std::move(stream_override_);
   }
 
   void set_stream_override(
       std::unique_ptr<StreamOverrideParameters> stream_override) {
     stream_override_ = std::move(stream_override);
   }
 
+  bool initiated_in_secure_context() const {
+    return initiated_in_secure_context_;
+  }
+  void set_initiated_in_secure_context(bool secure) {
+    initiated_in_secure_context_ = secure;
+  }
+
  private:
   blink::WebPageVisibilityState visibility_state_;
   int render_frame_id_;
   bool is_main_frame_;
   GURL frame_origin_;
   bool parent_is_main_frame_;
   int parent_render_frame_id_;
   bool allow_download_;
   ui::PageTransition transition_type_;
   bool should_replace_current_entry_;
   int transferred_request_child_id_;
   int transferred_request_request_id_;
   int service_worker_provider_id_;
   bool originated_from_service_worker_;
   blink::WebString custom_user_agent_;
   blink::WebString requested_with_;
   std::unique_ptr<StreamOverrideParameters> stream_override_;
   LoFiState lofi_state_;
+  bool initiated_in_secure_context_;
 
   DISALLOW_COPY_AND_ASSIGN(RequestExtraData);
 };
 
 }  // namespace content
 
 #endif  // CONTENT_CHILD_REQUEST_EXTRA_DATA_H_