Prevent usage of web payments API over insecure HTTPS.

components/payments/content/origin_security_checker.h

+// Copyright 2017 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#ifndef COMPONENTS_PAYMENTS_CONTENT_ORIGIN_SECURITY_CHECKER_H_
+#define COMPONENTS_PAYMENTS_CONTENT_ORIGIN_SECURITY_CHECKER_H_
+
+#include "base/macros.h"
+
+class GURL;
+
+namespace payments {
+
+class OriginSecurityChecker {
+ public:
+  // Returns true for a valid |url| from a secure origin.
+  static bool IsOriginSecure(const GURL& url);
+
+  // Returns true for a valid |url| with a cryptographic scheme, e.g., HTTPS,
+  // HTTPS-SO, WSS.
+  static bool IsSchemeCryptographic(const GURL& url);
+
+ private:
+  DISALLOW_IMPLICIT_CONSTRUCTORS(OriginSecurityChecker);
+};
+
+}  // namespace payments
+
+#endif  // COMPONENTS_PAYMENTS_CONTENT_ORIGIN_SECURITY_CHECKER_H_