Add SSLStatus flags to feed HTTP_WARNING security level

content/public/browser/ssl_status.h

Index: content/public/browser/ssl_status.h
diff --git a/content/public/browser/ssl_status.h b/content/public/browser/ssl_status.h
index 192ecd78c7415a534b6d851bee72ea4a7c8779d5..f07f5398942eeabc27556b5800ac77eb807843d9 100644
--- a/content/public/browser/ssl_status.h
+++ b/content/public/browser/ssl_status.h
@@ -41,6 +41,18 @@ struct CONTENT_EXPORT SSLStatus {
     // HTTPS page containing "executed" HTTPS resources (i.e. script)
     // loaded with certificate errors.
     RAN_CONTENT_WITH_CERT_ERRORS = 1 << 3,
+
+    // HTTP page containing a password input. Embedders may use this to
+    // adjust UI on nonsecure pages that collect sensitive data.
+    // TODO: integrate password detection to set this flag.
+    // https://crbug.com/647560
+    DISPLAYED_NONSECURE_PASSWORD_FIELD = 1 << 4,
+
+    // HTTP page containing a credit card input. Embedders may use this to
+    // adjust UI on nonsecure pages that collect sensitive data.
+    // TODO: integrate credit card detection to set this flag.
+    // https://crbug.com/647560
+    DISPLAYED_NONSECURE_CREDIT_CARD_FIELD = 1 << 5,
   };
 
   SSLStatus();