iOS: Mark HTTP pages with password fields with an omnibox icon.

ios/web/web_state/ui/crw_web_controller.mm

 // Copyright 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #import "ios/web/web_state/ui/crw_web_controller.h"
 
 #import <WebKit/WebKit.h>
 
 #import <objc/runtime.h>
 #include <stddef.h>
@@ skipping 4572 matching lines @@
 }
 
 - (void)didUpdateSSLStatusForCurrentNavigationItem {
   if ([_delegate respondsToSelector:
           @selector(
               webControllerDidUpdateSSLStatusForCurrentNavigationItem:)]) {
     [_delegate webControllerDidUpdateSSLStatusForCurrentNavigationItem:self];
   }
 }
 
+- (void)didShowPasswordInputOnHTTP {
+  web::NavigationItem* item =
+      self.webState->GetNavigationManager()->GetLastCommittedItem();
+  item->GetSSL().content_status |=

[Eugene But (OOO till 7-30), 2016/12/02 01:53:12]

Do you want to DCHECK that origin is not secure?

[lgarron, 2016/12/06 01:38:36]

Good idea; done.

+      web::SSLStatus::DISPLAYED_PASSWORD_FIELD_ON_HTTP;
+  [self didUpdateSSLStatusForCurrentNavigationItem];
+}
+
 - (void)handleSSLCertError:(NSError*)error {
   CHECK(web::IsWKWebViewSSLCertError(error));
 
   net::SSLInfo info;
   web::GetSSLInfoFromWKWebViewSSLCertError(error, &info);
 
   if (!info.cert) {
     // |info.cert| can be null if certChain in NSError is empty or can not be
     // parsed, in this case do not ask delegate if error should be allowed, it
     // should not be.
@@ skipping 1165 matching lines @@
   }
 
   return web::WEB_VIEW_DOCUMENT_TYPE_GENERIC;
 }
 
 - (NSString*)refererFromNavigationAction:(WKNavigationAction*)action {
   return [action.request valueForHTTPHeaderField:@"Referer"];
 }
 
 @end