Don't use SSLStatus from FrameHostMsg_DidCommitProvisionalLoad and instead cache it on the browser …

content/browser/frame_host/render_frame_host_impl.h

Index: content/browser/frame_host/render_frame_host_impl.h
diff --git a/content/browser/frame_host/render_frame_host_impl.h b/content/browser/frame_host/render_frame_host_impl.h
index 4baadd4d16beb6e1c3ffb254b0f43c5c1b6fa11c..9babb0980738dc6ced8b34c1bc883279bda227ef 100644
--- a/content/browser/frame_host/render_frame_host_impl.h
+++ b/content/browser/frame_host/render_frame_host_impl.h
@@ -36,6 +36,7 @@
 #include "content/common/navigation_params.h"
 #include "content/public/browser/render_frame_host.h"
 #include "content/public/common/javascript_message_type.h"
+#include "content/public/common/ssl_status.h"
 #include "media/mojo/interfaces/service_factory.mojom.h"
 #include "net/http/http_response_headers.h"
 #include "services/shell/public/cpp/interface_factory.h"
@@ -603,6 +604,10 @@ class CONTENT_EXPORT RenderFrameHostImpl
     return last_navigation_lofi_state_;
   }
 
+  void SetSSLStatusForPendingNavigate(const GURL& url,
+                                      const SSLStatus& ssl_status);
+  bool GetSSLStatusForPendingNavigate(const GURL& url, SSLStatus* ssl_status);
+
  protected:
   friend class RenderFrameHostFactory;
 
@@ -1056,6 +1061,9 @@ class CONTENT_EXPORT RenderFrameHostImpl
 
   std::vector<std::unique_ptr<shell::InterfaceRegistry>> media_registries_;
 
+  GURL pending_navigate_ssl_status_url_;
+  SSLStatus pending_navigate_ssl_status_;
+
   // NOTE: This must be the last member.
   base::WeakPtrFactory<RenderFrameHostImpl> weak_ptr_factory_;