Add new SecurityLevel for Http Bad state

components/security_state/security_state_model.h

Index: components/security_state/security_state_model.h
diff --git a/components/security_state/security_state_model.h b/components/security_state/security_state_model.h
index fc7e5f34c7d4d085098f3ac19c2b568f8d48fb3b..2aa256d0b2328656f7f98f7f3601f230ff1a046b 100644
--- a/components/security_state/security_state_model.h
+++ b/components/security_state/security_state_model.h
@@ -39,6 +39,14 @@ class SecurityStateModel {
     // HTTP/no URL/HTTPS but with insecure passive content on the page.
     NONE,
 
+    // HTTP, in a case where we want to show a visible warning about the page's
+    // lack of security.
+    //
+    // The criteria used to classify pages as NONE vs. HTTP_SHOW_WARNING will
+    // change over time. Eventually, NONE will be eliminated.
+    // See https://crbug.com/647754.
+    HTTP_SHOW_WARNING,
+
     // HTTPS with valid EV cert.
     EV_SECURE,