Prevent usage of web payments API over insecure HTTPS.

components/payments/content/origin_security_checker.h

Index: components/payments/content/origin_security_checker.h
diff --git a/components/payments/content/origin_security_checker.h b/components/payments/content/origin_security_checker.h
new file mode 100644
index 0000000000000000000000000000000000000000..0484228c4771c27fd3d45020de43f8f6005da1fe
--- /dev/null
+++ b/components/payments/content/origin_security_checker.h
@@ -0,0 +1,29 @@
+// Copyright 2017 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#ifndef COMPONENTS_PAYMENTS_CONTENT_ORIGIN_SECURITY_CHECKER_H_
+#define COMPONENTS_PAYMENTS_CONTENT_ORIGIN_SECURITY_CHECKER_H_
+
+#include "base/macros.h"
+
+class GURL;
+
+namespace payments {
+
+class OriginSecurityChecker {
+ public:
+  // Returns true for a valid |url| from a secure origin.
+  static bool IsSecureOrigin(const GURL& url);
+
+  // Returns true for a valid |url| with a cryptographic scheme, e.g., HTTPS,
+  // HTTPS-SO, WSS.
+  static bool IsCryptographicScheme(const GURL& url);
+
+ private:
+  DISALLOW_IMPLICIT_CONSTRUCTORS(OriginSecurityChecker);
+};
+
+}  // namespace payments
+
+#endif  // COMPONENTS_PAYMENTS_CONTENT_ORIGIN_SECURITY_CHECKER_H_