Downgrade lock icon for broken-HTTPS subresources

third_party/WebKit/Source/core/loader/MixedContentChecker.cpp

 /*
  * Copyright (C) 2012 Google Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions
  * are met:
  *
  * 1.  Redistributions of source code must retain the above copyright
  *     notice, this list of conditions and the following disclaimer.
  * 2.  Redistributions in binary form must reproduce the above copyright
@@ skipping 440 matching lines @@
     if (frameType == WebURLRequest::FrameTypeNested) {
         // FIXME: Deal with RemoteFrames.
         Frame* parentFrame = effectiveFrame->tree().parent();
         ASSERT(parentFrame);
         if (parentFrame->isLocalFrame())
             effectiveFrame = toLocalFrame(parentFrame);
     }
     return effectiveFrame;
 }
 
+void MixedContentChecker::handleCertificateError(LocalFrame* frame, const ResourceRequest& request, const ResourceResponse& response)
+{
+    WebURLRequest::FrameType frameType = request.frameType();
+    LocalFrame* effectiveFrame = effectiveFrameForFrameType(frame, frameType);
+    if (frameType == WebURLRequest::FrameTypeTopLevel || !effectiveFrame)
+        return;
+
+    FrameLoaderClient* client = effectiveFrame->loader().client();
+    WebURLRequest::RequestContext requestContext = request.requestContext();
+    ContextType contextType = MixedContentChecker::contextTypeFromContext(requestContext, frame);
+    logToConsoleAboutCertificateError(effectiveFrame, response.url(), requestContext);
+    if (contextType == ContextTypeBlockable) {
+        client->didRunContentWithCertificateErrors(response.url(), response.getSecurityInfo(), effectiveFrame->document()->url(), effectiveFrame->loader().documentLoader()->response().getSecurityInfo());
+    } else {
+        // contextTypeFromContext() never returns NotMixedContent (it
+        // computes the type of mixed content, given that the content is
+        // mixed).
+        ASSERT(contextType != ContextTypeNotMixedContent);
+        client->didDisplayContentWithCertificateErrors(response.url(), response.getSecurityInfo(), effectiveFrame->document()->url(), effectiveFrame->loader().documentLoader()->response().getSecurityInfo());
+    }
+}
+
+// static
+void MixedContentChecker::logToConsoleAboutCertificateError(LocalFrame* frame, const KURL& url, WebURLRequest::RequestContext requestContext)
+{
+    String message = String::format(
+        "Invalid certificate: The page at '%s' loaded a %s with certificate errors from '%s'.",
+        frame->document()->url().elidedString().utf8().data(), typeNameFromContext(requestContext), url.elidedString().utf8().data());
+    frame->document()->addConsoleMessage(ConsoleMessage::create(SecurityMessageSource, WarningMessageLevel, message));
+}
+
 MixedContentChecker::ContextType MixedContentChecker::contextTypeForInspector(LocalFrame* frame, const ResourceRequest& request)
 {
     LocalFrame* effectiveFrame = effectiveFrameForFrameType(frame, request.frameType());
 
     LocalFrame* mixedFrame = inWhichFrameIsContentMixed(effectiveFrame, request.frameType(), request.url());
     if (!mixedFrame)
         return ContextTypeNotMixedContent;
 
     // See comment in shouldBlockFetch() about loading the main resource of a subframe.
     if (request.frameType() == WebURLRequest::FrameTypeNested && !SchemeRegistry::shouldTreatURLSchemeAsCORSEnabled(request.url().protocol())) {
         return ContextTypeOptionallyBlockable;
     }
 
     return contextTypeFromContext(request.requestContext(), mixedFrame);
 }
 
 } // namespace blink