Downgrade page security if an inline has invalid certificate.

content/browser/web_contents/web_contents_impl.cc

Index: content/browser/web_contents/web_contents_impl.cc
diff --git a/content/browser/web_contents/web_contents_impl.cc b/content/browser/web_contents/web_contents_impl.cc
index b75d8bab31dbb7b4395ebf787e18656892c0dcf0..e68ed92e4245ac827b3ab6b5a37ad161ed20dde5 100644
--- a/content/browser/web_contents/web_contents_impl.cc
+++ b/content/browser/web_contents/web_contents_impl.cc
@@ -1806,6 +1806,9 @@ void WebContentsImpl::DragSourceMovedTo(int client_x, int client_y,
 
 void WebContentsImpl::DidGetResourceResponseStart(
   const ResourceRequestDetails& details) {
+  if (net::IsCertStatusError(details.ssl_cert_status)) {
+    displayed_insecure_content_ = true;

[Charlie Reis, 2014/02/26 18:49:06]

I don't know the SSL manager code very well, but it seems like this logic might
belong in SSLManager::DidStartResourceResponse (or something related to it), and
that it should trigger a call to OnDid{Display|Run}InsecureContent.  Just
setting the flag doesn't send out all the intended notifications.

[abarth-chromium, 2014/02/26 19:17:07]

Yep

+  }
   controller_.ssl_manager()->DidStartResourceResponse(details);
 
   FOR_EACH_OBSERVER(WebContentsObserver, observers_,
@@ -2086,6 +2089,9 @@ void WebContentsImpl::OnDidLoadResourceFromMemoryCache(
       url, GetRenderProcessHost()->GetID(), cert_id, cert_status, http_method,
       mime_type, resource_type);
 
+  if (net::IsCertStatusError(cert_status)) {
+    displayed_insecure_content_ = true;
+  }
   controller_.ssl_manager()->DidLoadFromMemoryCache(details);
 
   FOR_EACH_OBSERVER(WebContentsObserver, observers_,