Add a console messsage for HTTP-bad

chrome/browser/ui/browser.cc

Index: chrome/browser/ui/browser.cc
diff --git a/chrome/browser/ui/browser.cc b/chrome/browser/ui/browser.cc
index e6cc266c85a03406dd0705897fd5cea1f6154b3b..ff81232e78431f61261ed696c6a1e86b8cb0a092 100644
--- a/chrome/browser/ui/browser.cc
+++ b/chrome/browser/ui/browser.cc
@@ -1424,12 +1424,16 @@ void Browser::NavigationStateChanged(WebContents* source,
     hosted_app_controller_->UpdateLocationBarVisibility(true);
 }
 
-void Browser::VisibleSSLStateChanged(const WebContents* source) {
+void Browser::VisibleSSLStateChanged(WebContents* source) {
   // When the current tab's SSL state changes, we need to update the URL
   // bar to reflect the new state.
   DCHECK(source);
   if (tab_strip_model_->GetActiveWebContents() == source)
     UpdateToolbar(false);
+
+  ChromeSecurityStateModelClient* security_model =
+      ChromeSecurityStateModelClient::FromWebContents(source);

[felt, 2016/10/17 16:59:33]

To make sure I understand:

(1) Something triggers DidChangeVisibleSSLState (like a load is committed, or
mixed content detected) which leads to this

(2) UpdateToolbar will, down the line, cause CSSMC to be updated

(3) This will then tell the CSSMC to maybe display the console message

This presumably assumes, then, that #2 has happened before #3 -- that
UpdateToolbar does cause the SSM to update. Or else it won't know that it needs
to display the console message. Yeah? Which is sort of weird.

[estark, 2016/10/17 17:14:20]

CSSMC::VisibleSSLStateChanged() computes the SecurityLevel fresh from the
current SSLStatus to check whether it needs to display the console message. So
it doesn't rely on #2 having happened first.

(It is a tad wasteful, but it should only happen once on navigation and when
there's a change like mixed content, which is relatively rarely compared to how
often the omnibox redrawing causes the security level to be recomputed.)

[felt, 2016/10/17 17:18:36]

Oh I see, I missed that there was a call to GetSecurityInfo at the top. So this
just adds one more time it's recomputed. ;) Cool.

+  security_model->VisibleSSLStateChanged();
 }
 
 void Browser::AddNewContents(WebContents* source,