Reintroduce password support to NativeTextfieldViews

ui/gfx/render_text.cc

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "ui/gfx/render_text.h"
 
 #include <algorithm>
 
 #include "base/i18n/break_iterator.h"
 #include "base/logging.h"
 #include "base/stl_util.h"
 #include "ui/gfx/canvas.h"
 #include "ui/gfx/canvas_skia.h"
 #include "unicode/uchar.h"
 
 namespace {
 
+// All chars are replaced by this char when the password style is set.
+// TODO(benrg): GTK uses the first of U+25CF, U+2022, U+2731, U+273A, '*'
+// that's available in the font (find_invisible_char() in gtkentry.c).
+const char16 PASSWORD_REPLACEMENT_CHAR = '*';
+
 #ifndef NDEBUG
 // Check StyleRanges invariant conditions: sorted and non-overlapping ranges.
 void CheckStyleRanges(const gfx::StyleRanges& style_ranges, size_t length) {
   if (length == 0) {
     DCHECK(style_ranges.empty()) << "Style ranges exist for empty text.";
     return;
   }
   for (gfx::StyleRanges::size_type i = 0; i < style_ranges.size() - 1; i++) {
     const ui::Range& former = style_ranges[i].range;
     const ui::Range& latter = style_ranges[i + 1].range;
@@ skipping 48 matching lines @@
 
 }  // namespace
 
 namespace gfx {
 
 StyleRange::StyleRange()
     : font(),
       foreground(SK_ColorBLACK),
       strike(false),
       underline(false),
+      password(false),
       range() {
 }
 
 RenderText::~RenderText() {
 }
 
 void RenderText::SetText(const string16& text) {
   DCHECK(!composition_range_.IsValid());
   size_t old_text_length = text_.length();
   text_ = text;
@@ skipping 24 matching lines @@
 #endif
   cached_bounds_and_offset_valid_ = false;
 
   // Reset selection model. SetText should always followed by SetSelectionModel
   // or SetCursorPosition in upper layer.
   SetSelectionModel(SelectionModel(0, 0, SelectionModel::LEADING));
 
   UpdateLayout();
 }
 
+string16 RenderText::GetCensoredText() const {
+  string16 txt = text();
+  for (gfx::StyleRanges::const_iterator i = style_ranges().begin();
+       i != style_ranges().end(); ++i) {
+    if (i->password) {
+      // TODO(benrg): There should probably be one bullet/asterisk per
+      // cursorable character, not one per UTF-16 word. However, I'm not sure
+      // it's worth the effort. GTK appears to use one per code point. Do people
+      // use non-BMP code points and combining diacritics in their passwords?
+      std::fill(txt.begin() + i->range.start(),
+                txt.begin() + i->range.end(), PASSWORD_REPLACEMENT_CHAR);
+    }
+  }
+  return txt;
+}
+
 void RenderText::ToggleInsertMode() {
   insert_mode_ = !insert_mode_;
   cached_bounds_and_offset_valid_ = false;
 }
 
 void RenderText::SetDisplayRect(const Rect& r) {
   display_rect_ = r;
   cached_bounds_and_offset_valid_ = false;
   UpdateLayout();
 }
@@ skipping 471 matching lines @@
 void RenderText::DrawCursor(Canvas* canvas) {
   // Paint cursor. Replace cursor is drawn as rectangle for now.
   // TODO(msw): Draw a better cursor with a better indication of association.
   if (cursor_visible() && focused()) {
     Rect r(GetUpdatedCursorBounds());
     canvas->DrawRectInt(kCursorColor, r.x(), r.y(), r.width(), r.height());
   }
 }
 
 }  // namespace gfx