Restrict WebShare to secure contexts.

third_party/WebKit/Source/modules/webshare/NavigatorShare.cpp

 // Copyright 2016 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "modules/webshare/NavigatorShare.h"
 
 #include "core/dom/DOMException.h"
 #include "core/dom/Document.h"
 #include "core/dom/ExceptionCode.h"
 #include "core/frame/LocalFrame.h"
@@ skipping 64 matching lines @@
 {
 }
 
 const char* NavigatorShare::supplementName()
 {
     return "NavigatorShare";
 }
 
 ScriptPromise NavigatorShare::share(ScriptState* scriptState, const ShareData& shareData)
 {
+    String errorMessage;
+    if (!scriptState->getExecutionContext()->isSecureContext(errorMessage)) {
+        DOMException* error = DOMException::create(SecurityError, errorMessage);
+        return ScriptPromise::rejectWithDOMException(scriptState, error);
+    }
     if (!UserGestureIndicator::utilizeUserGesture()) {
         DOMException* error = DOMException::create(SecurityError, "Must be handling a user gesture to perform a share request.");
         return ScriptPromise::rejectWithDOMException(scriptState, error);
     }
 
     Document* doc = toDocument(scriptState->getExecutionContext());
     DCHECK(doc);
     if (!m_service) {
         LocalFrame* frame = doc->frame();
         DCHECK(frame);
@@ skipping 14 matching lines @@
 
     return promise;
 }
 
 ScriptPromise NavigatorShare::share(ScriptState* scriptState, Navigator& navigator, const ShareData& shareData)
 {
     return from(navigator).share(scriptState, shareData);
 }
 
 } // namespace blink