[autofill] Add support for PSL domain matching for password autofill.

content/public/common/password_form.h

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CONTENT_PUBLIC_COMMON_PASSWORD_FORM_H__
 #define CONTENT_PUBLIC_COMMON_PASSWORD_FORM_H__
 
 #include <map>
 #include <string>
 #include <vector>
@@ skipping 36 matching lines @@
     SCHEME_DIGEST,
     SCHEME_OTHER
   } scheme;
 
   // The "Realm" for the sign-on (scheme, host, port for SCHEME_HTML, and
   // contains the HTTP realm for dialog-based forms).
   // The signon_realm is effectively the primary key used for retrieving
   // data from the database, so it must not be empty.
   std::string signon_realm;
 
+  // The "Realm" for the sign-on (scheme, host, port for SCHEME_HTML, and
+  // contains the HTTP realm for dialog-based forms). This realm is only set
+  // to a non-empty value if this is not a perfect match for same origin
+  // matching and instead just a match using the public suffix. In that case,
+  // this must be set to where this PasswordForm data originated from.
+  // For example, if you have a password for http://www.foo.bar (where .bar is

[palmer, 2013/06/11 18:55:45]

Document here what our scheme-matching (HTTP vs. HTTPS) policy is, and why.

My strong desire is still to never autofill from HTTPS forms into HTTP. I'd like
to have that documented and tested.

[nyquist, 2013/06/11 23:54:43]

Done.

+  // the public suffix) and it shows up on http://m.foo.bar,
+  // |original_signon_realm| must be set to http://www.foo.bar.
+  std::string original_signon_realm;
+
   // The URL (minus query parameters) containing the form. This is the primary
   // data used by the PasswordManager to decide (in longest matching prefix
   // fashion) whether or not a given PasswordForm result from the database is a
   // good fit for a particular form on a page, so it must not be empty.
   GURL origin;
 
   // The action target of the form. This is the primary data used by the
   // PasswordManager for form autofill; that is, the action of the saved
   // credentials must match the action of the form on the page to be autofilled.
   // If this is empty / not available, it will result in a "restricted"
@@ skipping 99 matching lines @@
   PasswordForm();
   ~PasswordForm();
 };
 
 // Map username to PasswordForm* for convenience. See password_form_manager.h.
 typedef std::map<string16, PasswordForm*> PasswordFormMap;
 
 }  // namespace content
 
 #endif  // CONTENT_PUBLIC_COMMON_PASSWORD_FORM_H__