Add (some) password detection for HTTP-bad

components/password_manager/content/browser/content_password_manager_driver.cc

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "components/password_manager/content/browser/content_password_manager_driver.h"
 
 #include "components/autofill/content/browser/content_autofill_driver.h"
 #include "components/autofill/core/common/form_data.h"
 #include "components/autofill/core/common/password_form.h"
 #include "components/password_manager/content/browser/bad_message.h"
 #include "components/password_manager/content/browser/content_password_manager_driver_factory.h"
 #include "components/password_manager/core/browser/log_manager.h"
 #include "components/password_manager/core/browser/password_manager.h"
 #include "components/password_manager/core/browser/password_manager_client.h"
 #include "content/public/browser/browser_context.h"
 #include "content/public/browser/child_process_security_policy.h"
 #include "content/public/browser/navigation_details.h"
 #include "content/public/browser/navigation_entry.h"
 #include "content/public/browser/render_frame_host.h"
 #include "content/public/browser/render_process_host.h"
 #include "content/public/browser/render_view_host.h"
 #include "content/public/browser/site_instance.h"
 #include "content/public/browser/ssl_status.h"
 #include "content/public/browser/web_contents.h"
+#include "content/public/common/origin_util.h"
 #include "net/cert/cert_status_flags.h"
 #include "services/shell/public/cpp/interface_provider.h"
 
 namespace password_manager {
 
+namespace {
+
+void MaybeNotifyPasswordInputShownOnHttp(content::RenderFrameHost* rfh) {
+  content::WebContents* web_contents =
+      content::WebContents::FromRenderFrameHost(rfh);
+  if (!content::IsOriginSecure(web_contents->GetVisibleURL())) {
+    web_contents->OnPasswordInputShownOnHttp();
+  }
+}
+
+}  // namespace
+
 ContentPasswordManagerDriver::ContentPasswordManagerDriver(
     content::RenderFrameHost* render_frame_host,
     PasswordManagerClient* client,
     autofill::AutofillClient* autofill_client)
     : render_frame_host_(render_frame_host),
       client_(client),
       password_generation_manager_(client, this),
       password_autofill_manager_(this, autofill_client),
       next_free_key_(0),
       binding_(this),
@@ skipping 109 matching lines @@
   for (const auto& form : forms)
     if (!CheckChildProcessSecurityPolicy(
             form.origin, BadMessageReason::CPMD_BAD_ORIGIN_FORMS_PARSED))
       return;
 
   OnPasswordFormsParsedNoRenderCheck(forms);
 }
 
 void ContentPasswordManagerDriver::OnPasswordFormsParsedNoRenderCheck(
     const std::vector<autofill::PasswordForm>& forms) {
+  MaybeNotifyPasswordInputShownOnHttp(render_frame_host_);
   GetPasswordManager()->OnPasswordFormsParsed(this, forms);
   GetPasswordGenerationManager()->CheckIfFormClassifierShouldRun();
 }
 
 void ContentPasswordManagerDriver::PasswordFormsRendered(
     const std::vector<autofill::PasswordForm>& visible_forms,
     bool did_stop_loading) {
   for (const auto& form : visible_forms)
     if (!CheckChildProcessSecurityPolicy(
             form.origin, BadMessageReason::CPMD_BAD_ORIGIN_FORMS_RENDERED))
@@ skipping 131 matching lines @@
 ContentPasswordManagerDriver::GetPasswordGenerationAgent() {
   if (!password_gen_agent_) {
     render_frame_host_->GetRemoteInterfaces()->GetInterface(
         mojo::GetProxy(&password_gen_agent_));
   }
 
   return password_gen_agent_;
 }
 
 }  // namespace password_manager