[Autofill] Do not offer autofill suggestions on insecure forms

components/autofill/core/browser/autofill_assistant.cc

 // Copyright 2016 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "components/autofill/core/browser/autofill_assistant.h"
 
 #include "base/containers/adapters.h"
 #include "base/strings/string16.h"
 #include "components/autofill/core/browser/autofill_experiments.h"
 #include "components/autofill/core/browser/autofill_manager.h"
@@ skipping 12 matching lines @@
 
 void AutofillAssistant::Reset() {
   credit_card_form_data_.reset();
 }
 
 bool AutofillAssistant::CanShowCreditCardAssist(
     const std::vector<FormStructure*>& form_structures) {
   if (form_structures.empty() || credit_card_form_data_ != nullptr ||
       !IsAutofillCreditCardAssistEnabled() ||
       !autofill_manager_->client()->IsContextSecure(
-          form_structures.front()->source_url())) {
+          form_structures.front()->source_url()) ||
+      !form_structures.front()->target_url().SchemeIs("https")) {
     return false;
   }
 
   for (FormStructure* cur_form : base::Reversed(form_structures)) {
     if (cur_form->IsCompleteCreditCardForm()) {
       credit_card_form_data_.reset(new FormData(cur_form->ToFormData()));
       break;
     }
   }
   return credit_card_form_data_ != nullptr;
@@ skipping 15 matching lines @@
 void AutofillAssistant::OnFullCardRequestSucceeded(const CreditCard& card,
                                                    const base::string16& cvc) {
   autofill_manager_->FillCreditCardForm(kNoQueryId, *credit_card_form_data_,
                                         credit_card_form_data_->fields[0], card,
                                         cvc);
 }
 
 void AutofillAssistant::OnFullCardRequestFailed() {}
 
 }  // namespace autofill