Prevent usage of web payments API over insecure HTTPS.

chrome/browser/ui/views/payments/payment_request_browsertest.cc

 // Copyright 2017 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include <vector>
 
 #include "base/macros.h"
 #include "base/strings/utf_string_conversions.h"
 #include "chrome/browser/ui/browser_commands.h"
 #include "chrome/browser/ui/views/payments/payment_request_browsertest_base.h"
@@ skipping 100 matching lines @@
 
   InvokePaymentRequestUI();
 
   ResetEventObserver(DialogEvent::DIALOG_CLOSED);
 
   PayWithCreditCardAndWait(base::ASCIIToUTF16("123"));
 
   WaitForObservedEvent();
 
   // The actual structure of the card response is unit-tested.
-  ExpectBodyContains(std::vector<base::string16>{
-      card.GetRawInfo(autofill::CREDIT_CARD_NUMBER),
-      card.GetRawInfo(autofill::CREDIT_CARD_NAME_FULL),
-      card.GetRawInfo(autofill::CREDIT_CARD_EXP_MONTH),
-      card.GetRawInfo(autofill::CREDIT_CARD_EXP_4_DIGIT_YEAR)});
-  ExpectBodyContains(std::vector<base::string16>{
-      billing_address.GetRawInfo(autofill::NAME_FIRST),
-      billing_address.GetRawInfo(autofill::NAME_LAST),
-      billing_address.GetRawInfo(autofill::ADDRESS_HOME_LINE1),
-      billing_address.GetRawInfo(autofill::ADDRESS_HOME_LINE2),
-      billing_address.GetRawInfo(autofill::ADDRESS_HOME_COUNTRY),
-      billing_address.GetRawInfo(autofill::ADDRESS_HOME_ZIP),
-      billing_address.GetRawInfo(autofill::ADDRESS_HOME_CITY),
-      billing_address.GetRawInfo(autofill::ADDRESS_HOME_STATE)});
+  ExpectBodyContains({card.GetRawInfo(autofill::CREDIT_CARD_NUMBER),
+                      card.GetRawInfo(autofill::CREDIT_CARD_NAME_FULL),
+                      card.GetRawInfo(autofill::CREDIT_CARD_EXP_MONTH),
+                      card.GetRawInfo(autofill::CREDIT_CARD_EXP_4_DIGIT_YEAR)});
+  ExpectBodyContains(
+      {billing_address.GetRawInfo(autofill::NAME_FIRST),
+       billing_address.GetRawInfo(autofill::NAME_LAST),
+       billing_address.GetRawInfo(autofill::ADDRESS_HOME_LINE1),
+       billing_address.GetRawInfo(autofill::ADDRESS_HOME_LINE2),
+       billing_address.GetRawInfo(autofill::ADDRESS_HOME_COUNTRY),
+       billing_address.GetRawInfo(autofill::ADDRESS_HOME_ZIP),
+       billing_address.GetRawInfo(autofill::ADDRESS_HOME_CITY),
+       billing_address.GetRawInfo(autofill::ADDRESS_HOME_STATE)});
+}
+
+IN_PROC_BROWSER_TEST_F(PaymentRequestNoShippingTest, InvalidSSL) {
+  SetInvalidSsl();
+
+  autofill::AutofillProfile billing_address = autofill::test::GetFullProfile();
+  AddAutofillProfile(billing_address);
+  autofill::CreditCard card = autofill::test::GetCreditCard();
+  card.set_billing_address_id(billing_address.guid());
+  AddCreditCard(card);  // Visa.
+
+  ResetEventObserver(DialogEvent::NOT_SUPPORTED_ERROR);
+
+  EXPECT_TRUE(content::ExecuteScript(
+      GetActiveWebContents(),
+      "(function() { document.getElementById('buy').click(); })();"));
+
+  WaitForObservedEvent();
+
+  ExpectBodyContains({"NotSupportedError"});
 }
 
 class PaymentRequestAbortTest : public PaymentRequestBrowserTestBase {
  protected:
   PaymentRequestAbortTest()
       : PaymentRequestBrowserTestBase("/payment_request_abort_test.html") {}
 
  private:
   DISALLOW_COPY_AND_ASSIGN(PaymentRequestAbortTest);
 };
@@ skipping 150 matching lines @@
   EXPECT_EQ(1u, requests.size());
   std::vector<std::string> supported_card_networks =
       requests[0]->spec()->supported_card_networks();
   EXPECT_EQ(3u, supported_card_networks.size());
   EXPECT_EQ("mastercard", supported_card_networks[0]);
   EXPECT_EQ("visa", supported_card_networks[1]);
   EXPECT_EQ("jcb", supported_card_networks[2]);
 }
 
 }  // namespace payments