Limit foreign fetch to only intercept requests made from secure contexts.

content/child/request_extra_data.h

Index: content/child/request_extra_data.h
diff --git a/content/child/request_extra_data.h b/content/child/request_extra_data.h
index eb80fac5047c19a420cffff8cb151bae96e5ceef..0fe21006f8a13c7defa2abaa37ee8e0ddc23b8ce 100644
--- a/content/child/request_extra_data.h
+++ b/content/child/request_extra_data.h
@@ -132,6 +132,13 @@ class CONTENT_EXPORT RequestExtraData
     stream_override_ = std::move(stream_override);
   }
 
+  bool initiated_in_secure_context() const {
+    return initiated_in_secure_context_;
+  }
+  void set_initiated_in_secure_context(bool secure) {
+    initiated_in_secure_context_ = secure;
+  }
+
  private:
   blink::WebPageVisibilityState visibility_state_;
   int render_frame_id_;
@@ -150,6 +157,7 @@ class CONTENT_EXPORT RequestExtraData
   blink::WebString requested_with_;
   std::unique_ptr<StreamOverrideParameters> stream_override_;
   LoFiState lofi_state_;
+  bool initiated_in_secure_context_;
 
   DISALLOW_COPY_AND_ASSIGN(RequestExtraData);
 };