PlzNavigate: Move navigation-level mixed content checks to the browser.

third_party/WebKit/Source/core/loader/MixedContentChecker.h

 /*
  * Copyright (C) 2012 Google Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions are
  * met:
  *
  *     * Redistributions of source code must retain the above copyright
  * notice, this list of conditions and the following disclaimer.
  *     * Redistributions in binary form must reproduce the above
@@ skipping 29 matching lines @@
 #include "wtf/text/WTFString.h"
 
 namespace blink {
 
 class Frame;
 class LocalFrame;
 class KURL;
 class ResourceResponse;
 class SecurityOrigin;
 
+// Checks all sub-resource loads for mixed-content. Frame-level loads are
+// checked at the browser by MixedContentNavigationThrottle. Changes to this
+// class might need to be reflected on its browser counterpart.
+//
+// Current mixed content draft that drives this implementation:
+// https://w3c.github.io/webappsec-mixed-content/
 class CORE_EXPORT MixedContentChecker final {
   WTF_MAKE_NONCOPYABLE(MixedContentChecker);
   DISALLOW_NEW();
 
  public:
   enum ReportingStatus { SendReport, SuppressReport };
   static bool shouldBlockFetch(LocalFrame*,
                                WebURLRequest::RequestContext,
                                WebURLRequest::FrameType,
                                ResourceRequest::RedirectStatus,
@@ skipping 27 matching lines @@
   // Returns the frame that should be considered the effective frame
   // for a mixed content check for the given frame type.
   static Frame* effectiveFrameForFrameType(LocalFrame*,
                                            WebURLRequest::FrameType);
 
   static void handleCertificateError(LocalFrame*,
                                      const ResourceResponse&,
                                      WebURLRequest::FrameType,
                                      WebURLRequest::RequestContext);
 
+  // Log to the frame console about found mixed content and report it to the CSP
+  // policy.
+  static void mixedContentFoundByTheBrowser(LocalFrame*,
+                                            const KURL& mainResourceUrl,
+                                            const KURL& mixedContentUrl,
+                                            WebURLRequest::RequestContext,
+                                            bool wasAllowed,
+                                            bool hadRedirect);
+
  private:
   FRIEND_TEST_ALL_PREFIXES(MixedContentCheckerTest, HandleCertificateError);
 
   static Frame* inWhichFrameIsContentMixed(Frame*,
                                            WebURLRequest::FrameType,
                                            const KURL&);
 
   static void logToConsoleAboutFetch(LocalFrame*,
                                      const KURL&,
                                      const KURL&,
                                      WebURLRequest::RequestContext,
                                      bool allowed);
   static void logToConsoleAboutWebSocket(LocalFrame*,
                                          const KURL&,
                                          const KURL&,
                                          bool allowed);
   static void count(Frame*, WebURLRequest::RequestContext);
 };
 
 }  // namespace blink
 
 #endif  // MixedContentChecker_h