Restrict Navigator.getInstalledRelatedApps() to secure contexts.

third_party/WebKit/Source/modules/installedapp/NavigatorInstalledApp.cpp

 // Copyright 2016 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "modules/installedapp/NavigatorInstalledApp.h"
 
 #include "bindings/core/v8/CallbackPromiseAdapter.h"
 #include "bindings/core/v8/ScriptPromise.h"
 #include "bindings/core/v8/ScriptPromiseResolver.h"
 #include "bindings/core/v8/ScriptState.h"
@@ skipping 26 matching lines @@
   if (!supplement) {
     supplement = new NavigatorInstalledApp(navigator);
     provideTo(navigator, supplementName(), supplement);
   }
   return *supplement;
 }
 
 ScriptPromise NavigatorInstalledApp::getInstalledRelatedApps(
     ScriptState* scriptState,
     Navigator& navigator) {
+  // [SecureContext] from the IDL ensures this.
+  DCHECK(scriptState->getExecutionContext()->isSecureContext());
   return NavigatorInstalledApp::from(navigator).getInstalledRelatedApps(
       scriptState);
 }
 
 class RelatedAppArray {
   STATIC_ONLY(RelatedAppArray);
 
  public:
   using WebType = const WebVector<WebRelatedApplication>&;
 
@@ skipping 36 matching lines @@
 
 const char* NavigatorInstalledApp::supplementName() {
   return "NavigatorInstalledApp";
 }
 
 DEFINE_TRACE(NavigatorInstalledApp) {
   Supplement<Navigator>::trace(visitor);
 }
 
 }  // namespace blink