Create FormatUrlForSecurityDisplay helper function.

chrome/browser/ui/elide_url.h

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 //
 // This file defines utility functions for eliding URLs.
 
 #ifndef CHROME_BROWSER_UI_ELIDE_URL_H_
 #define CHROME_BROWSER_UI_ELIDE_URL_H_
 
 #include <string>
@@ skipping 27 matching lines @@
 
 // This function takes a GURL object and elides the host to fit within
 // the given width. The function will never elide past the TLD+1 point,
 // but after that, will leading-elide the domain name to fit the width.
 // Example: http://sub.domain.com ---> "...domain.com", or "...b.domain.com"
 // depending on the width.
 base::string16 ElideHost(const GURL& host_url,
                          const gfx::FontList& font_list,
                          float available_pixel_width);
 
+// This is a convenience function for formatting a URL as an origin in a concise
+// and human-friendly way. Use this instead of |net::FormatUrl| when the reader
+// needs only to understand the origin (rather than the entire URL).
+//
+// - Omits the path for standard schemes, excepting file and filesystem.
+// - Omits the port if it is the default for the scheme.
+//
+// Do not use this for URLs which will be parsed or sent to other applications.
+//

[msw, 2015/05/29 00:18:51]

nit: remove this blank comment line; the next paragraph meshes with this well.

[palmer, 2015/05/29 17:52:13]

Done.

+// Callers should only set |omit_scheme| to true when it is safe to do so: in
+// contexts where the origin is known to be secure or is always secure by
+// necessity. As examples:

[msw, 2015/05/29 00:18:51]

nit: "For example when GURL::SchemeIsCryptographic() or
content::IsOriginSecure() is true." and then remove the example lines below.

[palmer, 2015/05/29 17:52:13]

Done.

+//
+//   display = FormatOriginForDisplay(url, ..., url.SchemeIsCryptographic());
+//
+//   display = FormatOriginForDisplay(url, ..., IsOriginSecure(url));
+base::string16 FormatOriginForDisplay(const GURL& origin,
+                                      const std::string& languages,
+                                      bool omit_scheme);

[msw, 2015/05/29 00:18:51]

Do we need an |omit_scheme| argument already? Why can't it be determined
automatically based on the scheme security?

[palmer, 2015/05/29 17:52:13]

1. Flexibility. Callers may have different needs.

2. Because the web is not yet at the place where people can safely assume that
"no scheme shown must mean it was a secure scheme". Someday, hopefully soon, but
not yet. In the short term I expect many/most callers to pass false even if
GURL::SchemeIsCryptographic returns true.

+
 #endif  // CHROME_BROWSER_UI_ELIDE_URL_H_