media: Mark more EME APIs with SecureContext

Previously this was only partially done due to issue 634270. Now that
issue has been fixed and we can mark more EME APIs with SecureContext.

In the current EME spec, there are 9 APIs marked with SecureContext.
This CL makes sure all of them are marked with SecureContext in Blink
IDL.

Also mark getStatusForPolicy() (not in EME spec yet) with SecureContext.

Bug: 692289
Test: Manually tested and verified no MediaKey* exposed in http://
Change-Id: If976d30b3371c4be2bcd33ab61268f21145232a1
Reviewed-on: https://chromium-review.googlesource.com/1030760Reviewed-by: David Dorwin <ddorwin@chromium.org>
Commit-Queue: Xiaohan Wang <xhwang@chromium.org>
Cr-Commit-Position: refs/heads/master@{#554666}

third_party/blink/renderer/modules/encryptedmedia/html_media_element_encrypted_media.idl

@@ -4,7 +4,7 @@
 [
     ImplementedAs=HTMLMediaElementEncryptedMedia
 ] partial interface HTMLMediaElement {
-    readonly attribute MediaKeys mediaKeys;
+    [SecureContext] readonly attribute MediaKeys mediaKeys;
     [SecureContext, CallWith=ScriptState] Promise setMediaKeys(MediaKeys? mediaKeys);
     attribute EventHandler onencrypted;
     attribute EventHandler onwaitingforkey;

third_party/blink/renderer/modules/encryptedmedia/media_key_message_event.idl

@@ -33,7 +33,8 @@ enum MediaKeyMessageType {
 };
 
 [
-    Constructor(DOMString type, MediaKeyMessageEventInit eventInitDict)
+    Constructor(DOMString type, MediaKeyMessageEventInit eventInitDict),
+    SecureContext
 ] interface MediaKeyMessageEvent : Event {
     readonly attribute MediaKeyMessageType messageType;
     readonly attribute ArrayBuffer message;

third_party/blink/renderer/modules/encryptedmedia/media_key_session.idl

@@ -24,7 +24,8 @@
  */
 
 [
-    ActiveScriptWrappable
+    ActiveScriptWrappable,
+    SecureContext
 ] interface MediaKeySession : EventTarget {
     // session properties
     readonly attribute DOMString sessionId;

third_party/blink/renderer/modules/encryptedmedia/media_key_status_map.idl

@@ -14,7 +14,9 @@ enum MediaKeyStatus {
     "internal-error"
 };
 
-interface MediaKeyStatusMap {
+[
+    SecureContext
+] interface MediaKeyStatusMap {
     iterable <BufferSource, MediaKeyStatus>;
     readonly attribute unsigned long size;
     boolean has(BufferSource keyId);

third_party/blink/renderer/modules/encryptedmedia/media_key_system_access.idl

@@ -4,7 +4,9 @@
 
 // https://w3c.github.io/encrypted-media/#mediakeysystemaccess-interface
 
-interface MediaKeySystemAccess {
+[
+    SecureContext
+] interface MediaKeySystemAccess {
     readonly attribute DOMString keySystem;
     MediaKeySystemConfiguration getConfiguration();
     [CallWith=ScriptState] Promise<MediaKeys> createMediaKeys();

third_party/blink/renderer/modules/encryptedmedia/media_keys_get_status_for_policy.idl

@@ -6,7 +6,8 @@
 
 [
     ImplementedAs=MediaKeysGetStatusForPolicy,
-    RuntimeEnabled=EncryptedMediaHdcpPolicyCheck
+    RuntimeEnabled=EncryptedMediaHdcpPolicyCheck,
+    SecureContext
 ] partial interface MediaKeys {
     [Measure, CallWith=ScriptState] Promise<MediaKeyStatus> getStatusForPolicy(MediaKeysPolicy policy);
 };