Downgrade lock icon for broken-HTTPS subresources

third_party/WebKit/Source/core/loader/FrameFetchContext.cpp

Index: third_party/WebKit/Source/core/loader/FrameFetchContext.cpp
diff --git a/third_party/WebKit/Source/core/loader/FrameFetchContext.cpp b/third_party/WebKit/Source/core/loader/FrameFetchContext.cpp
index 6084b70661771dde3525ba9743f6887eeadef140..3a1cbcb019525ca1aa6057005627d9b4263a0d76 100644
--- a/third_party/WebKit/Source/core/loader/FrameFetchContext.cpp
+++ b/third_party/WebKit/Source/core/loader/FrameFetchContext.cpp
@@ -34,6 +34,7 @@
 #include "bindings/core/v8/ScriptController.h"
 #include "core/dom/Document.h"
 #include "core/fetch/ClientHintsPreferences.h"
+#include "core/fetch/ResourceLoader.h"
 #include "core/fetch/UniqueIdentifier.h"
 #include "core/frame/FrameConsole.h"
 #include "core/frame/FrameHost.h"
@@ -237,6 +238,9 @@ void FrameFetchContext::dispatchDidReceiveResponse(unsigned long identifier, con
         m_documentLoader->clientHintsPreferences().updateFromAcceptClientHintsHeader(response.httpHeaderField("accept-ch"), fetcher);
     }
 
+    if (response.hasCertificateErrors() && resourceLoader)
+        MixedContentChecker::handleCertificateError(MixedContentChecker::effectiveFrameForFrameType(frame(), resourceLoader->originalRequest().frameType()), response.url(), resourceLoader->originalRequest().requestContext(), resourceLoader->originalRequest().frameType(), response.getSecurityInfo());
+
     frame()->loader().progress().incrementProgress(identifier, response);
     frame()->loader().client()->dispatchDidReceiveResponse(m_documentLoader, identifier, response);
     DocumentLoader* documentLoader = ensureLoaderForNotifications();