Fix blacklisting password forms with Credential Manager API.

ios/chrome/browser/passwords/credential_manager.mm

 // Copyright 2015 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #import "ios/chrome/browser/passwords/credential_manager.h"
 
 #include <utility>
 
 #include "base/ios/ios_util.h"
 #import "base/ios/weak_nsobject.h"
@@ skipping 187 matching lines @@
   std::unique_ptr<autofill::PasswordForm> form(
       password_manager::CreatePasswordFormFromCredentialInfo(
           CredentialInfoFromWebCredential(credential), page_url));
   form->skip_zero_click = !IsZeroClickAllowed();
 
   // TODO(mkwst): This is a stub; we should be checking the PasswordStore to
   // determine whether or not the credential exists, and calling UpdateLogin
   // accordingly.
   form_manager_.reset(
       new password_manager::CredentialManagerPasswordFormManager(
-          client_, driver_->AsWeakPtr(), *form, this));
+          client_, driver_->AsWeakPtr(),
+          *password_manager::CreateObservedPasswordFormFromOrigin(page_url),
+          std::move(form), this));
 }
 
 void CredentialManager::SignedOut(int request_id, const GURL& source_url) {
   // Invoked when the page invokes navigator.credentials.notifySignedOut, this
   // function notifies the PasswordStore that zero-click sign-in should be
   // disabled for the current page origin.
   DCHECK_GE(request_id, 0);
 
   // Requests from untrusted origins should be rejected.
   GURL page_url;
@@ skipping 158 matching lines @@
 bool CredentialManager::GetUrlWithAbsoluteTrust(GURL* page_url) {
   web::URLVerificationTrustLevel trust_level =
       web::URLVerificationTrustLevel::kNone;
   const GURL possibly_untrusted_url(web_state()->GetCurrentURL(&trust_level));
   if (trust_level == web::URLVerificationTrustLevel::kAbsolute) {
     *page_url = possibly_untrusted_url;
     return true;
   }
   return false;
 }