Prevent usage of web payments API over insecure HTTPS.

chrome/browser/ui/views/payments/payment_request_can_make_payment_browsertest.cc

 // Copyright 2017 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include <vector>
 
 #include "base/macros.h"
 #include "base/strings/utf_string_conversions.h"
 #include "chrome/browser/ui/views/payments/payment_request_browsertest_base.h"
 #include "components/autofill/core/browser/autofill_test_utils.h"
 #include "components/autofill/core/browser/credit_card.h"
 #include "content/public/test/browser_test_utils.h"
 
 namespace payments {
 
 class PaymentRequestCanMakePaymentQueryTest

[Mathieu, 2017/04/17 03:20:45]

could we add a test for an invalid ssl page, expecting false?
PaymentRequestBrowserTestBase has a handle on the
TestChromePaymentRequestDelegate, in case you want it to do specific things

[please use gerrit instead, 2017/04/17 18:19:54]

Done.

     : public PaymentRequestBrowserTestBase {
  protected:
   PaymentRequestCanMakePaymentQueryTest()
       : PaymentRequestBrowserTestBase(
             "/payment_request_can_make_payment_query_test.html") {}
 
   void CallCanMakePayment() {
     ResetEventObserver(DialogEvent::CAN_MAKE_PAYMENT_CALLED);
     ASSERT_TRUE(content::ExecuteScript(GetActiveWebContents(), "buy();"));
     WaitForObservedEvent();
   }
 
  private:
   DISALLOW_COPY_AND_ASSIGN(PaymentRequestCanMakePaymentQueryTest);
 };
 
 // Visa is required, and user has a visa instrument.
 IN_PROC_BROWSER_TEST_F(PaymentRequestCanMakePaymentQueryTest,
                        CanMakePayment_Supported) {
   const autofill::CreditCard card = autofill::test::GetCreditCard();  // Visa.
   AddCreditCard(card);
 
   CallCanMakePayment();
 
-  ExpectBodyContains(std::vector<base::string16>{base::ASCIIToUTF16("true")});
+  ExpectBodyContains({"true"});
 }
 
 // Visa is required, user has a visa instrument, and user is in incognito
 // mode.
 IN_PROC_BROWSER_TEST_F(PaymentRequestCanMakePaymentQueryTest,
                        CanMakePayment_Supported_InIncognitoMode) {
   SetIncognitoForTesting();
 
   const autofill::CreditCard card = autofill::test::GetCreditCard();  // Visa.
   AddCreditCard(card);
 
   CallCanMakePayment();
 
-  ExpectBodyContains(std::vector<base::string16>{base::ASCIIToUTF16("true")});
+  ExpectBodyContains({"true"});
 }
 
 // Visa is required, and user doesn't have a visa instrument.
 IN_PROC_BROWSER_TEST_F(PaymentRequestCanMakePaymentQueryTest,
                        CanMakePayment_NotSupported) {
   const autofill::CreditCard card = autofill::test::GetCreditCard2();  // Amex.
   AddCreditCard(card);
 
   CallCanMakePayment();
 
-  ExpectBodyContains(std::vector<base::string16>{base::ASCIIToUTF16("false")});
+  ExpectBodyContains({"false"});
 }
 
 // Visa is required, user doesn't have a visa instrument and the user is in
 // incognito mode. In this case canMakePayment always returns true.
 IN_PROC_BROWSER_TEST_F(PaymentRequestCanMakePaymentQueryTest,
                        CanMakePayment_NotSupported_InIncognitoMode) {
   SetIncognitoForTesting();
 
   const autofill::CreditCard card = autofill::test::GetCreditCard2();  // Amex.
   AddCreditCard(card);
 
   CallCanMakePayment();
 
   // Returns true because the user is in incognito mode, even though it should
   // return false in a normal profile.
-  ExpectBodyContains(std::vector<base::string16>{base::ASCIIToUTF16("true")});
+  ExpectBodyContains({"true"});
 }
 
 }  // namespace payments