Downgrade page security if an inline has invalid certificate.

content/browser/web_contents/web_contents_impl.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "content/browser/web_contents/web_contents_impl.h"
 
 #include <utility>
 
 #include "base/command_line.h"
 #include "base/debug/trace_event.h"
@@ skipping 1788 matching lines @@
   if (browser_plugin_embedder_.get())
     browser_plugin_embedder_->DragSourceMovedTo(client_x, client_y,
                                                 screen_x, screen_y);
   if (GetRenderViewHost())
     GetRenderViewHostImpl()->DragSourceMovedTo(client_x, client_y,
                                                screen_x, screen_y);
 }
 
 void WebContentsImpl::DidGetResourceResponseStart(
   const ResourceRequestDetails& details) {
+  if (net::IsCertStatusError(details.ssl_cert_status)) {
+    displayed_insecure_content_ = true;

[Charlie Reis, 2014/02/26 18:49:06]

I don't know the SSL manager code very well, but it seems like this logic might
belong in SSLManager::DidStartResourceResponse (or something related to it), and
that it should trigger a call to OnDid{Display|Run}InsecureContent.  Just
setting the flag doesn't send out all the intended notifications.

[abarth-chromium, 2014/02/26 19:17:07]

Yep

+  }
   controller_.ssl_manager()->DidStartResourceResponse(details);
 
   FOR_EACH_OBSERVER(WebContentsObserver, observers_,
                     DidGetResourceResponseStart(details));
 
   // TODO(avi): Remove. http://crbug.com/170921
   NotificationService::current()->Notify(
       NOTIFICATION_RESOURCE_RESPONSE_STARTED,
       Source<WebContents>(this),
       Details<const ResourceRequestDetails>(&details));
@@ skipping 260 matching lines @@
   int connection_status = 0;
   SignedCertificateTimestampIDStatusList signed_certificate_timestamp_ids;
   DeserializeSecurityInfo(security_info, &cert_id, &cert_status,
                           &security_bits, &connection_status,
                           &signed_certificate_timestamp_ids);
   // TODO(alcutter,eranm): Pass signed_certificate_timestamp_ids into details
   LoadFromMemoryCacheDetails details(
       url, GetRenderProcessHost()->GetID(), cert_id, cert_status, http_method,
       mime_type, resource_type);
 
+  if (net::IsCertStatusError(cert_status)) {
+    displayed_insecure_content_ = true;
+  }
   controller_.ssl_manager()->DidLoadFromMemoryCache(details);
 
   FOR_EACH_OBSERVER(WebContentsObserver, observers_,
                     DidLoadResourceFromMemoryCache(details));
 
   if (url.is_valid() && url.SchemeIsHTTPOrHTTPS()) {
     scoped_refptr<net::URLRequestContextGetter> request_context(
         resource_type == ResourceType::MEDIA ?
             GetBrowserContext()->GetMediaRequestContextForRenderProcess(
                 GetRenderProcessHost()->GetID()) :
@@ skipping 1631 matching lines @@
 }
 
 void WebContentsImpl::OnFrameRemoved(
     RenderViewHostImpl* render_view_host,
     int64 frame_id) {
    FOR_EACH_OBSERVER(WebContentsObserver, observers_,
                      FrameDetached(render_view_host, frame_id));
 }
 
 }  // namespace content