Introduce browser-side plumbing for sending the lock icon status to DevTools.

content/public/common/security_style.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CONTENT_PUBLIC_COMMON_SECURITY_STYLE_H_
 #define CONTENT_PUBLIC_COMMON_SECURITY_STYLE_H_
 
 namespace content {
 
 // Various aspects of the UI change their appearance according to the security
@@ skipping 10 matching lines @@
   // not be determined, either because it was retrieved using an unauthenticated
   // protocol, such as HTTP or FTP, or it was retrieved using a protocol that
   // supports authentication, such as HTTPS, but there were errors during
   // transmission that render us uncertain to the object's authenticity.
   SECURITY_STYLE_UNAUTHENTICATED,
 
   // SECURITY_STYLE_AUTHENTICATION_BROKEN indicates that we tried to retrieve
   // this object in an authenticated manner but were unable to do so.
   SECURITY_STYLE_AUTHENTICATION_BROKEN,
 
+  // SECURITY_STYLE_WARNING is a higher-level state that means that the object
+  // was retrieved in an authenticated manner, but there were security issues
+  // with the retrieval or the object interacted with less secure objects.

[Ryan Sleevi, 2015/06/03 23:43:52]

comment nit: I'm not sure what "higher-level state" is supposed to mean here?

If you drop "is a higher-level state that" from the comment, I think it's fine
and would resolve my unease at a possible layering issue in the comment.

(The reason I don't think this concept is itself a layering issue would because
Mike's current mixedcontent spec details "deprecated TLS-protection" to cover
this phase)

[lgarron, 2015/06/04 00:26:35]

Done.

(Thanks for the "deprecated TLS-protection" terminology.)

+  SECURITY_STYLE_WARNING,
+
   // SECURITY_STYLE_AUTHENTICATED indicates that we successfully retrieved this
   // object over an authenticated protocol, such as HTTPS.
   SECURITY_STYLE_AUTHENTICATED,
   SECURITY_STYLE_LAST = SECURITY_STYLE_AUTHENTICATED
 };
 
 }  // namespace content
 
 #endif  // CONTENT_PUBLIC_COMMON_SECURITY_STYLE_H_