DevTools security panel: explain subresources with cert errors separately

third_party/WebKit/Source/devtools/front_end/security/SecurityPanel.js

 // Copyright 2015 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 /**
  * @constructor
  * @extends {WebInspector.PanelWithSidebar}
  * @implements {WebInspector.TargetManager.Observer}
  */
 WebInspector.SecurityPanel = function()
@@ skipping 45 matching lines @@
      * @param {!SecurityAgent.SecurityState} securityState
      */
     setDisplayedInsecureContentStyle: function(securityState)
     {
         this._displayedInsecureContentStyle = securityState;
     },
 
     /**
      * @param {!SecurityAgent.SecurityState} newSecurityState
      * @param {!Array<!SecurityAgent.SecurityStateExplanation>} explanations
-     * @param {?SecurityAgent.MixedContentStatus} mixedContentStatus
+     * @param {?SecurityAgent.InsecureContentStatus} insecureContentStatus
      * @param {boolean} schemeIsCryptographic
      */
-    _updateSecurityState: function(newSecurityState, explanations, mixedContentStatus, schemeIsCryptographic)
+    _updateSecurityState: function(newSecurityState, explanations, insecureContentStatus, schemeIsCryptographic)
     {
         this._sidebarMainViewElement.setSecurityState(newSecurityState);
-        this._mainView.updateSecurityState(newSecurityState, explanations, mixedContentStatus, schemeIsCryptographic);
+        this._mainView.updateSecurityState(newSecurityState, explanations, insecureContentStatus, schemeIsCryptographic);
     },
 
     /**
      * @param {!WebInspector.Event} event
      */
     _onSecurityStateChanged: function(event)
     {
         var data = /** @type {!WebInspector.PageSecurityState} */ (event.data);
         var securityState = /** @type {!SecurityAgent.SecurityState} */ (data.securityState);
         var explanations = /** @type {!Array<!SecurityAgent.SecurityStateExplanation>} */ (data.explanations);
-        var mixedContentStatus = /** @type {?SecurityAgent.MixedContentStatus} */ (data.mixedContentStatus);
+        var insecureContentStatus = /** @type {?SecurityAgent.InsecureContentStatus} */ (data.insecureContentStatus);
         var schemeIsCryptographic = /** @type {boolean} */ (data.schemeIsCryptographic);
-        this._updateSecurityState(securityState, explanations, mixedContentStatus, schemeIsCryptographic);
+        this._updateSecurityState(securityState, explanations, insecureContentStatus, schemeIsCryptographic);
     },
 
     selectAndSwitchToMainView: function()
     {
         // The sidebar element will trigger displaying the main view. Rather than making a redundant call to display the main view, we rely on this.
         this._sidebarMainViewElement.select();
     },
     /**
      * @param {!WebInspector.SecurityPanel.Origin} origin
      */
@@ skipping 505 matching lines @@
         if (explanation.certificateId) {
             text.appendChild(WebInspector.SecurityPanel.createCertificateViewerButton(WebInspector.UIString("View certificate"), explanation.certificateId));
         }
 
         return text;
     },
 
     /**
      * @param {!SecurityAgent.SecurityState} newSecurityState
      * @param {!Array<!SecurityAgent.SecurityStateExplanation>} explanations
-     * @param {?SecurityAgent.MixedContentStatus} mixedContentStatus
+     * @param {?SecurityAgent.InsecureContentStatus} insecureContentStatus
      * @param {boolean} schemeIsCryptographic
      */
-    updateSecurityState: function(newSecurityState, explanations, mixedContentStatus, schemeIsCryptographic)
+    updateSecurityState: function(newSecurityState, explanations, insecureContentStatus, schemeIsCryptographic)
     {
         // Remove old state.
         // It's safe to call this even when this._securityState is undefined.
         this._summarySection.classList.remove("security-summary-" + this._securityState);
 
         // Add new state.
         this._securityState = newSecurityState;
         this._summarySection.classList.add("security-summary-" + this._securityState);
         var summaryExplanationStrings = {
             "unknown":  WebInspector.UIString("The security of this page is unknown."),
             "insecure": WebInspector.UIString("This page is insecure (broken HTTPS)."),
             "neutral":  WebInspector.UIString("This page is not secure."),
             "secure":   WebInspector.UIString("This page is secure (valid HTTPS).")
         }
         this._summaryText.textContent = summaryExplanationStrings[this._securityState];
 
         this._explanations = explanations,
-        this._mixedContentStatus = mixedContentStatus;
+        this._insecureContentStatus = insecureContentStatus;
         this._schemeIsCryptographic = schemeIsCryptographic;
 
-        this._panel.setRanInsecureContentStyle(mixedContentStatus.ranInsecureContentStyle);
-        this._panel.setDisplayedInsecureContentStyle(mixedContentStatus.displayedInsecureContentStyle);
+        this._panel.setRanInsecureContentStyle(insecureContentStatus.ranInsecureContentStyle);
+        this._panel.setDisplayedInsecureContentStyle(insecureContentStatus.displayedInsecureContentStyle);
 
         this.refreshExplanations();
     },
 
     refreshExplanations: function()
     {
         this._securityExplanationsMain.removeChildren();
         this._securityExplanationsExtra.removeChildren();
         for (var explanation of this._explanations) {
             if (explanation.securityState === SecurityAgent.SecurityState.Info) {
                 this._addExplanation(this._securityExplanationsExtra, explanation);
             } else {
                 this._addExplanation(this._securityExplanationsMain, explanation);
             }
         }
 
         this._addMixedContentExplanations();
+        this._addContentWithCertErrorsExplanations();
+
+        // If all resources were served securely, add a Secure explanation.
+        if (this._schemeIsCryptographic && this._insecureContentStatus && (!this._insecureContentStatus.displayedMixedContent && !this._insecureContentStatus.ranMixedContent && !this._insecureContentStatus.displayedContentWithCertErrors && !this._insecureContentStatus.ranContentWithCertErrors)) {
+            this._addExplanation(this._securityExplanationsMain, /** @type {!SecurityAgent.SecurityStateExplanation} */ ({
+                "securityState": SecurityAgent.SecurityState.Secure,
+                "summary": WebInspector.UIString("Secure Resources"),
+                "description": WebInspector.UIString("All resources on this page are served securely.")
+            }));
+        }
     },
 
     _addMixedContentExplanations: function()
     {
         if (!this._schemeIsCryptographic)
             return;
 
-        if (this._mixedContentStatus && (this._mixedContentStatus.ranInsecureContent || this._mixedContentStatus.displayedInsecureContent)) {
-            if (this._mixedContentStatus.ranInsecureContent)
-                this._addMixedContentExplanation(this._securityExplanationsMain, this._mixedContentStatus.ranInsecureContentStyle, WebInspector.UIString("Active Mixed Content"), WebInspector.UIString("You have recently allowed insecure content (such as scripts or iframes) to run on this site."), WebInspector.NetworkLogView.MixedContentFilterValues.BlockOverridden, showBlockOverriddenMixedContentInNetworkPanel);
-            if (this._mixedContentStatus.displayedInsecureContent)
-                this._addMixedContentExplanation(this._securityExplanationsMain, this._mixedContentStatus.displayedInsecureContentStyle, WebInspector.UIString("Mixed Content"), WebInspector.UIString("The site includes HTTP resources."), WebInspector.NetworkLogView.MixedContentFilterValues.Displayed, showDisplayedMixedContentInNetworkPanel);
-        }
-
-        if (this._mixedContentStatus && (!this._mixedContentStatus.displayedInsecureContent && !this._mixedContentStatus.ranInsecureContent)) {
-            this._addExplanation(this._securityExplanationsMain, /** @type {!SecurityAgent.SecurityStateExplanation} */ ({
-                "securityState": SecurityAgent.SecurityState.Secure,
-                "summary": WebInspector.UIString("Secure Resources"),
-                "description": WebInspector.UIString("All resources on this page are served securely.")
-            }));
+        if (this._insecureContentStatus && (this._insecureContentStatus.ranMixedContent || this._insecureContentStatus.displayedMixedContent)) {
+            if (this._insecureContentStatus.ranMixedContent)
+                this._addMixedContentExplanation(this._securityExplanationsMain, this._insecureContentStatus.ranInsecureContentStyle, WebInspector.UIString("Active Mixed Content"), WebInspector.UIString("You have recently allowed insecure content (such as scripts or iframes) to run on this site."), WebInspector.NetworkLogView.MixedContentFilterValues.BlockOverridden, showBlockOverriddenMixedContentInNetworkPanel);
+            if (this._insecureContentStatus.displayedMixedContent)
+                this._addMixedContentExplanation(this._securityExplanationsMain, this._insecureContentStatus.displayedInsecureContentStyle, WebInspector.UIString("Mixed Content"), WebInspector.UIString("The site includes HTTP resources."), WebInspector.NetworkLogView.MixedContentFilterValues.Displayed, showDisplayedMixedContentInNetworkPanel);
         }
 
         if (this._panel.filterRequestCount(WebInspector.NetworkLogView.MixedContentFilterValues.Blocked) > 0)
             this._addMixedContentExplanation(this._securityExplanationsExtra, SecurityAgent.SecurityState.Info, WebInspector.UIString("Blocked mixed content"), WebInspector.UIString("Your page requested insecure resources that were blocked."), WebInspector.NetworkLogView.MixedContentFilterValues.Blocked, showBlockedMixedContentInNetworkPanel);
 
         /**
          * @param {!Event} e
          */
         function showDisplayedMixedContentInNetworkPanel(e)
         {
@@ skipping 56 matching lines @@
         if (filterRequestCount > 0) {
             requestsAnchor.textContent = WebInspector.UIString("View %d request%s in Network Panel", filterRequestCount, (filterRequestCount > 1 ? "s" : ""));
         } else {
             // Network instrumentation might not have been enabled for the page load, so the security panel does not necessarily know a count of individual mixed requests at this point. Point the user at the Network Panel which prompts them to refresh.
             requestsAnchor.textContent = WebInspector.UIString("View requests in Network Panel");
         }
         requestsAnchor.href = "";
         requestsAnchor.addEventListener("click", networkFilterFn);
     },
 
+    _addContentWithCertErrorsExplanations: function()
+    {
+        if (!this._schemeIsCryptographic)
+            return;
+
+        if (!this._insecureContentStatus)
+            return;
+
+        if (this._insecureContentStatus.ranContentWithCertErrors) {
+            this._addExplanation(this._securityExplanationsMain, /** @type {!SecurityAgent.SecurityStateExplanation} */ ({
+                "securityState": this._insecureContentStatus.ranInsecureContentStyle,
+                "summary": WebInspector.UIString("Active content with certificate errors"),
+                "description": WebInspector.UIString("You have recently allowed content loaded with certificate errors (such as scripts or iframes) to run on this site.")
+            }));
+        }
+
+        if (this._insecureContentStatus.displayedContentWithCertErrors) {
+            this._addExplanation(this._securityExplanationsMain, /** @type {!SecurityAgent.SecurityStateExplanation} */ ({
+                "securityState": this._insecureContentStatus.displayedInsecureContentStyle,
+                "summary": WebInspector.UIString("Content with certificate errors"),
+                "description": WebInspector.UIString("This site includes resources that were loaded with certificate errors.")
+            }));
+        }
+      },
+
+
     __proto__: WebInspector.VBox.prototype
 }
 
 /**
  * @constructor
  * @extends {WebInspector.VBox}
  * @param {!WebInspector.SecurityPanel} panel
  * @param {!WebInspector.SecurityPanel.Origin} origin
  * @param {!WebInspector.SecurityPanel.OriginState} originState
  */
@@ skipping 228 matching lines @@
         row.createChild("div").textContent = key;
 
         var valueDiv = row.createChild("div");
         if (typeof value === "string") {
             valueDiv.textContent = value;
         } else {
             valueDiv.appendChild(value);
         }
     }
 }