Only apply federated matches on HTTPS

components/password_manager/core/browser/psl_matching_helper.cc

Index: components/password_manager/core/browser/psl_matching_helper.cc
diff --git a/components/password_manager/core/browser/psl_matching_helper.cc b/components/password_manager/core/browser/psl_matching_helper.cc
index 02bccbe4b97a11dd755ef61f5326d64b2c5e8cff..5ae887d4c549e0db3d6fe9dda92c8fd5a7963063 100644
--- a/components/password_manager/core/browser/psl_matching_helper.cc
+++ b/components/password_manager/core/browser/psl_matching_helper.cc
@@ -99,6 +99,10 @@ std::string GetRegistryControlledDomain(const GURL& signon_realm) {
 }
 
 bool IsFederatedMatch(const std::string& signon_realm, const GURL& origin) {
+  // Federated matches only apply to HTTPS.
+  if (!origin.SchemeIs(url::kHttpsScheme))
+    return false;
+
   // The format should be "federation://origin.host/federation.host;
   std::string federated_realm = "federation://" + origin.host() + "/";
   return signon_realm.size() > federated_realm.size() &&