Limit foreign fetch to only intercept requests made from secure contexts.

content/browser/service_worker/foreign_fetch_request_handler.h

 // Copyright 2015 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CONTENT_BROWSER_SERVICE_WORKER_FOREIGN_FETCH_REQUEST_HANDLER_H_
 #define CONTENT_BROWSER_SERVICE_WORKER_FOREIGN_FETCH_REQUEST_HANDLER_H_
 
 #include "base/macros.h"
 #include "base/memory/weak_ptr.h"
 #include "base/supports_user_data.h"
@@ skipping 43 matching lines @@
       storage::BlobStorageContext* blob_storage_context,
       int process_id,
       int provider_id,
       bool skip_service_worker,
       FetchRequestMode request_mode,
       FetchCredentialsMode credentials_mode,
       FetchRedirectMode redirect_mode,
       ResourceType resource_type,
       RequestContextType request_context_type,
       RequestContextFrameType frame_type,
-      scoped_refptr<ResourceRequestBody> body);
+      scoped_refptr<ResourceRequestBody> body,
+      bool initiated_in_secure_context);
 
   // Returns the handler attached to |request|. This may return null
   // if no handler is attached.
   static ForeignFetchRequestHandler* GetHandler(net::URLRequest* request);
 
   // Creates a protocol interceptor for foreign fetch.
   static std::unique_ptr<net::URLRequestInterceptor> CreateInterceptor(
       ResourceContext* resource_context);
 
   ~ForeignFetchRequestHandler() override;
@@ skipping 49 matching lines @@
   bool use_network_ = false;
 
   base::WeakPtrFactory<ForeignFetchRequestHandler> weak_factory_;
 
   DISALLOW_COPY_AND_ASSIGN(ForeignFetchRequestHandler);
 };
 
 }  // namespace content
 
 #endif  // CONTENT_BROWSER_SERVICE_WORKER_FOREIGN_FETCH_REQUEST_HANDLER_H_