Limit foreign fetch to only intercept requests made from secure contexts.

content/browser/loader/resource_dispatcher_host_impl.cc

Index: content/browser/loader/resource_dispatcher_host_impl.cc
diff --git a/content/browser/loader/resource_dispatcher_host_impl.cc b/content/browser/loader/resource_dispatcher_host_impl.cc
index da256df980413b76fe334efae34d9216b3394399..7527079fefc81cbaaf5374c5e50d41c43389252c 100644
--- a/content/browser/loader/resource_dispatcher_host_impl.cc
+++ b/content/browser/loader/resource_dispatcher_host_impl.cc
@@ -1617,7 +1617,7 @@ void ResourceDispatcherHostImpl::BeginRequest(
         request_data.fetch_request_mode, request_data.fetch_credentials_mode,
         request_data.fetch_redirect_mode, request_data.resource_type,
         request_data.fetch_request_context_type, request_data.fetch_frame_type,
-        request_data.request_body);
+        request_data.request_body, request_data.initiated_in_secure_context);
   }
 
   // Have the appcache associate its extra info with the request.