PlzNavigate: Move navigation-level mixed content checks to the browser.

third_party/WebKit/Source/core/loader/MixedContentChecker.h

 /*
  * Copyright (C) 2012 Google Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions are
  * met:
  *
  *     * Redistributions of source code must retain the above copyright
  * notice, this list of conditions and the following disclaimer.
  *     * Redistributions in binary form must reproduce the above
@@ skipping 30 matching lines @@
 
 namespace blink {
 
 class Frame;
 class FrameLoaderClient;
 class LocalFrame;
 class KURL;
 class ResourceResponse;
 class SecurityOrigin;
 
+// Checks all sub-resource loads for mixed-content. Frame-level loads are
+// checked at the browser by MixedContentNavigationThrottle. Changes to this
+// class might need to be reflected on its browser counterpart.
+//
+// Current mixed content draft that drives this implementation:
+// https://w3c.github.io/webappsec-mixed-content/

[Mike West, 2016/07/19 14:39:32]

Can you file a bug to move whatever else we can up and out of Blink? This seems
like it's going to be a maintenance burden, and it would be a good idea to start
planning for it now.

[carlosk, 2016/07/19 16:32:16]

Sub resource loads are more complicated to handle in the browser. From a quick
talk to clamy@ that at least adds one extra IPC round trip to the browser per
resource request. Alternatively it would require adding the so much avoided
request-to-tree-node mapping to the IO thread.

This is something that should be evaluated anyway so I filed:
https://bugs.chromium.org/p/chromium/issues/detail?id=629528

 class CORE_EXPORT MixedContentChecker final {
     WTF_MAKE_NONCOPYABLE(MixedContentChecker);
     DISALLOW_NEW();
 public:
     enum ReportingStatus { SendReport, SuppressReport };
     static bool shouldBlockFetch(LocalFrame*, WebURLRequest::RequestContext, WebURLRequest::FrameType, ResourceRequest::RedirectStatus, const KURL&, ReportingStatus = SendReport);
     static bool shouldBlockFetch(LocalFrame* frame, const ResourceRequest& request, const KURL& url, ReportingStatus status = SendReport)
     {
         return shouldBlockFetch(frame, request.requestContext(), request.frameType(), request.redirectStatus(), url, status);
     }
@@ skipping 19 matching lines @@
     static Frame* inWhichFrameIsContentMixed(Frame*, WebURLRequest::FrameType, const KURL&);
 
     static void logToConsoleAboutFetch(LocalFrame*, const KURL&, const KURL&, WebURLRequest::RequestContext, bool allowed);
     static void logToConsoleAboutWebSocket(LocalFrame*, const KURL&, const KURL&, bool allowed);
     static void count(Frame*, WebURLRequest::RequestContext);
 };
 
 } // namespace blink
 
 #endif // MixedContentChecker_h