Add SSLStatus flags to feed HTTP_WARNING security level

components/security_state/security_state_model.h

 // Copyright 2015 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef COMPONENTS_SECURITY_STATE_SECURITY_STATE_MODEL_H_
 #define COMPONENTS_SECURITY_STATE_SECURITY_STATE_MODEL_H_
 
 #include <stdint.h>
 
 #include "base/macros.h"
@@ skipping 157 matching lines @@
     // True if the page displayed passive mixed content.
     bool displayed_mixed_content;
     // True if the page ran active mixed content.
     bool ran_mixed_content;
     // True if the page displayed passive subresources with certificate errors.
     bool displayed_content_with_cert_errors;
     // True if the page ran active subresources with certificate errors.
     bool ran_content_with_cert_errors;
     // True if PKP was bypassed due to a local trust anchor.
     bool pkp_bypassed;
+    // True if the page was an HTTP page that displayed a password field.
+    bool displayed_nonsecure_password_field;

[felt, 2016/09/20 06:09:41]

nit, here and elsewhere:

let's say HTTP instead of non-secure, to be clear. at least until we invent a
less confusing phrase.

[estark, 2016/09/20 17:53:33]

Oh yes, I forgot about that. Done. I find "displayed_http_password_field"
confusing because it could be interpreted as a password field in a form that
*submits* to http, so I made it |displayed_password_field_on_http|, and similar
elsewhere.

+    // True if the page was an HTTP page that displayed a credit card field.
+    bool displayed_nonsecure_credit_card_field;
   };
 
   // These security levels describe the treatment given to pages that
   // display and run mixed content. They are used to coordinate the
   // treatment of mixed content with other security UI elements.
   static const SecurityLevel kDisplayedInsecureContentLevel;
   static const SecurityLevel kRanInsecureContentLevel;
 
   SecurityStateModel();
   virtual ~SecurityStateModel();
@@ skipping 13 matching lines @@
   mutable VisibleSecurityState visible_security_state_;
 
   SecurityStateModelClient* client_;
 
   DISALLOW_COPY_AND_ASSIGN(SecurityStateModel);
 };
 
 }  // namespace security_state
 
 #endif  // COMPONENTS_SECURITY_STATE_SECURITY_STATE_MODEL_H_