SSL Fix: Step 3....

chrome/browser/ssl/ssl_policy.cc

 // Copyright (c) 2006-2008 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/ssl/ssl_policy.h"
 
 #include "base/singleton.h"
 #include "base/string_piece.h"
 #include "base/string_util.h"
 #include "chrome/browser/cert_store.h"
@@ skipping 424 matching lines @@
     // if (IsIntranetHost(url.host()))
     //   return SECURITY_STYLE_AUTHENTICATION_BROKEN;
 
     return SECURITY_STYLE_AUTHENTICATED;
   }
 
   // Otherwise, show the unauthenticated style.
   return SECURITY_STYLE_UNAUTHENTICATED;
 }
 
+// static
+bool SSLPolicy::IsMixedContent(const GURL& url,
+                               ResourceType::Type resource_type,
+                               const std::string& main_frame_origin) {
+  ////////////////////////////////////////////////////////////////////////////
+  // WARNING: This function is called from both the IO and UI threads.  Do  //
+  //          not touch any non-thread-safe objects!  You have been warned. //
+  ////////////////////////////////////////////////////////////////////////////
+
+  // We can't possibly have mixed content when loading the main frame.
+  if (resource_type == ResourceType::MAIN_FRAME)
+    return false;
+
+  // TODO(abarth): This is wrong, but it matches our current behavior.
+  //               I'll fix this in a subsequent step.
+  return GURL(main_frame_origin).SchemeIsSecure() && !url.SchemeIsSecure();
+}
+
 SSLErrorInfo SSLPolicy::GetSSLErrorInfo(SSLManager::CertError* error) {
   return SSLErrorInfo::CreateError(
       SSLErrorInfo::NetErrorToErrorType(error->cert_error()),
       error->ssl_info().cert, error->request_url());
 }
 
 void SSLPolicy::OnDenyCertificate(SSLManager::CertError* error) {
   // Default behavior for rejecting a certificate.
   error->CancelRequest();
   error->manager()->DenyCertForHost(error->ssl_info().cert,
@@ skipping 29 matching lines @@
 void SSLPolicy::OnFatalCertError(const GURL& main_frame_url,
                                  SSLManager::CertError* error) {
   if (error->resource_type() != ResourceType::MAIN_FRAME) {
     error->DenyRequest();
     return;
   }
   error->CancelRequest();
   ShowErrorPage(this, error);
   // No need to degrade our security indicators because we didn't continue.
 }