[WIP] Upgrade-insecure-request: upgrade insecurely-redirected requests.

content/browser/net/url_request_insecure_interceptor.cc

+// Copyright 2016 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#include "content/browser/loader/resource_request_info_impl.h"
+#include "content/browser/net/url_request_insecure_interceptor.h"
+#include "net/url_request/url_request_redirect_job.h"
+
+namespace content {
+
+URLRequestInsecureInterceptor::URLRequestInsecureInterceptor() {}
+URLRequestInsecureInterceptor::~URLRequestInsecureInterceptor() {}
+
+net::URLRequestJob* URLRequestInsecureInterceptor::MaybeInterceptRequest(
+    net::URLRequest* request,
+    net::NetworkDelegate* network_delegate) const {
+  return nullptr;
+}
+
+net::URLRequestJob* URLRequestInsecureInterceptor::MaybeInterceptResponse(
+    net::URLRequest* request,
+    net::NetworkDelegate* network_delegate) const {
+  return nullptr;
+}
+
+net::URLRequestJob* URLRequestInsecureInterceptor::MaybeInterceptRedirect(
+    net::URLRequest* request,
+    net::NetworkDelegate* network_delegate,
+    const GURL& location) const {
+  const content::ResourceRequestInfoImpl* info =
+      content::ResourceRequestInfoImpl::ForRequest(request);
+
+  if (!info ||
+      !(info->insecure_request_policy() & blink::kUpgradeInsecureRequests) ||
+      !location.SchemeIs("http"))
+    return nullptr;
+
+  // Upgrade insecure request.
+  GURL::Replacements replacement;
+  replacement.SetSchemeStr("https");
+  if (location.port() == "80")
+    replacement.SetPortStr("443");
+
+  return new net::URLRequestRedirectJob(
+      request, network_delegate, location.ReplaceComponents(replacement),
+      net::URLRequestRedirectJob::REDIRECT_307_TEMPORARY_REDIRECT,
+      "upgrade insecurely redirected request");
+}
+
+}  // namespace content