UPGRADE: Correctly handle navigations.

third_party/WebKit/Source/core/html/HTMLFormElement.cpp

 /*
  * Copyright (C) 1999 Lars Knoll (knoll@kde.org)
  *           (C) 1999 Antti Koivisto (koivisto@kde.org)
  *           (C) 2001 Dirk Mueller (mueller@kde.org)
  * Copyright (C) 2004, 2005, 2006, 2007, 2008, 2009 Apple Inc. All rights reserved.
  *           (C) 2006 Alexey Proskuryakov (ap@nypop.com)
  *
  * This library is free software; you can redistribute it and/or
  * modify it under the terms of the GNU Library General Public
  * License as published by the Free Software Foundation; either
@@ skipping 471 matching lines @@
         ASSERT_NOT_REACHED();
 
     event->setTarget(this);
     m_pendingAutocompleteEventsQueue->enqueueEvent(event);
 }
 
 void HTMLFormElement::parseAttribute(const QualifiedName& name, const AtomicString& oldValue, const AtomicString& value)
 {
     if (name == actionAttr) {
         m_attributes.parseAction(value);
-        // If the new action attribute is pointing to insecure "action" location from a secure page
-        // it is marked as "passive" mixed content.
-        KURL actionURL = document().completeURL(m_attributes.action().isEmpty() ? document().url().getString() : m_attributes.action());
-        if (MixedContentChecker::isMixedFormAction(document().frame(), actionURL))
-            UseCounter::count(document().frame(), UseCounter::MixedContentFormPresent);
         logUpdateAttributeIfIsolatedWorldAndInDocument("form", actionAttr, oldValue, value);
+
+        if (document().getInsecureRequestsPolicy() != SecurityContext::InsecureRequestsUpgrade) {
+            // If we're not upgrading insecure requests, and the new action attribute is pointing to
+            // an insecure "action" location from a secure page it is marked as "passive" mixed content.
+            KURL actionURL = document().completeURL(m_attributes.action().isEmpty() ? document().url().getString() : m_attributes.action());
+            if (MixedContentChecker::isMixedFormAction(document().frame(), actionURL))
+                UseCounter::count(document().frame(), UseCounter::MixedContentFormPresent);
+        }
     } else if (name == targetAttr) {
         m_attributes.setTarget(value);
     } else if (name == methodAttr) {
         m_attributes.updateMethodType(value);
     } else if (name == enctypeAttr) {
         m_attributes.updateEncodingType(value);
     } else if (name == accept_charsetAttr) {
         m_attributes.setAcceptCharset(value);
     } else if (name == onautocompleteAttr) {
         setAttributeEventListener(EventTypeNames::autocomplete, createAttributeEventListener(this, name, value, eventParameterName()));
@@ skipping 307 matching lines @@
 {
     for (const auto& control : associatedElements()) {
         if (!control->isFormControlElement())
             continue;
         if (toHTMLFormControlElement(control)->canBeSuccessfulSubmitButton())
             toHTMLFormControlElement(control)->pseudoStateChanged(CSSSelector::PseudoDefault);
     }
 }
 
 } // namespace blink