PlzNavigate: Move navigation-level mixed content checks to the browser.

content/public/browser/web_contents_delegate.h

Index: content/public/browser/web_contents_delegate.h
diff --git a/content/public/browser/web_contents_delegate.h b/content/public/browser/web_contents_delegate.h
index 9d3db1efb792cc6c6efcb6a5be7fc41cec5e4e65..a20f411984281fdc6904cff8915a2d38767bbc57 100644
--- a/content/public/browser/web_contents_delegate.h
+++ b/content/public/browser/web_contents_delegate.h
@@ -66,6 +66,10 @@ namespace net {
 class X509Certificate;
 }
 
+namespace url {
+class Origin;
+}
+
 namespace blink {
 class WebGestureEvent;
 }
@@ -555,6 +559,16 @@ class CONTENT_EXPORT WebContentsDelegate {
   // Requests the app banner. This method is called from the DevTools.
   virtual void RequestAppBannerFromDevTools(content::WebContents* web_contents);
 
+  // Reports that passive mixed content was found at the specified url.
+  virtual void PassiveInsecureContentFound(const GURL& resource_url) {}
+
+  // Checks if running of active mixed-content is allowed for the specified
+  // WebContents/tab.
+  virtual bool ShouldAllowRunningInsecureContent(bool allowed_per_settings,

[nasko, 2017/01/12 18:32:38]

nit: Shouldn't this be "allower_per_prefs"? When I read settings, I thought
immediately content settings, which are maintained by the chrome/ layer and got
confused. Tracing the code, the value comes from WebPreferences.

[carlosk, 2017/01/21 02:54:59]

I'm just following the pattern used in MixedContentsChecked for the mirror API
[1]. I didn't understand your explanation.

[1]
https://cs.chromium.org/chromium/src/chrome/renderer/content_settings_observe...

[nasko, 2017/01/23 22:32:37]

My comment meant to say that the source of the input is WebPreferences and not
ContentSettings, so naming the variable to indicate where it comes from makes it
easier to understand.

[carlosk, 2017/02/08 02:59:02]

Understood this time and agreed. Changed all cases accordingly.

+                                                 const url::Origin& origin,
+                                                 const GURL& resource_url,
+                                                 WebContents* web_contents);

[nasko, 2017/01/12 18:32:38]

Let's keep WebContents as the first parameter to be consistent with the rest of
the delegate methods and since it is the context in which this call is made.

[carlosk, 2017/01/21 02:54:59]

Done.

+
  protected:
   virtual ~WebContentsDelegate();