Prevent usage of web payments API over insecure HTTPS.

chrome/browser/payments/chrome_payment_request_delegate.cc

 // Copyright 2017 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/payments/chrome_payment_request_delegate.h"
 
 #include "chrome/browser/autofill/personal_data_manager_factory.h"
 #include "chrome/browser/autofill/validation_rules_storage_factory.h"
 #include "chrome/browser/browser_process.h"
+#include "chrome/browser/payments/ssl_validity_checker.h"
 #include "chrome/browser/profiles/profile.h"
 #include "chrome/browser/ui/browser_dialogs.h"
 #include "components/autofill/core/browser/personal_data_manager.h"
 #include "components/payments/content/payment_request_dialog.h"
 #include "content/public/browser/web_contents.h"
 #include "third_party/libaddressinput/chromium/chrome_metadata_source.h"
 #include "third_party/libaddressinput/chromium/chrome_storage_impl.h"
 
 namespace payments {
 
@@ skipping 28 matching lines @@
 const std::string& ChromePaymentRequestDelegate::GetApplicationLocale() const {
   return g_browser_process->GetApplicationLocale();
 }
 
 bool ChromePaymentRequestDelegate::IsIncognito() const {
   Profile* profile =
       Profile::FromBrowserContext(web_contents_->GetBrowserContext());
   return profile && profile->GetProfileType() == Profile::INCOGNITO_PROFILE;
 }
 
+bool ChromePaymentRequestDelegate::IsValidSslCertificate() {
+  return SslValidityChecker::IsValidSslCertificate(web_contents_);

[Mathieu, 2017/04/17 03:20:45]

This is apparently true in tests? How?

[please use gerrit instead, 2017/04/17 18:19:54]

Tests use such URLs as
https://127.0.0.1:45436/payment_request_no_shipping_test.html and
https://a.com:42667/payment_request_main.html. These have valid HTTPS certs.

+}
+
+const GURL& ChromePaymentRequestDelegate::GetLastCommittedURL() const {
+  return web_contents_->GetLastCommittedURL();
+}
+
 void ChromePaymentRequestDelegate::DoFullCardRequest(
     const autofill::CreditCard& credit_card,
     base::WeakPtr<autofill::payments::FullCardRequest::ResultDelegate>
         result_delegate) {
   dialog_->ShowCvcUnmaskPrompt(credit_card, result_delegate, web_contents_);
 }
 
 std::unique_ptr<const ::i18n::addressinput::Source>
 ChromePaymentRequestDelegate::GetAddressInputSource() {
   return base::WrapUnique(new autofill::ChromeMetadataSource(
       I18N_ADDRESS_VALIDATION_DATA_URL,
       GetPersonalDataManager()->GetURLRequestContextGetter()));
 }
 std::unique_ptr<::i18n::addressinput::Storage>
 ChromePaymentRequestDelegate::GetAddressInputStorage() {
   return autofill::ValidationRulesStorageFactory::CreateStorage();
 }
 
 }  // namespace payments