iOS: Mark HTTP pages with password fields with an omnibox icon.

ios/web/web_state/ui/crw_web_controller.mm

Index: ios/web/web_state/ui/crw_web_controller.mm
diff --git a/ios/web/web_state/ui/crw_web_controller.mm b/ios/web/web_state/ui/crw_web_controller.mm
index daba52a1871c7d98c800ef12efd9cc37c4478fbd..cf9ea8a80b6df99e69a1b79328b7f3d86c0f065a 100644
--- a/ios/web/web_state/ui/crw_web_controller.mm
+++ b/ios/web/web_state/ui/crw_web_controller.mm
@@ -4590,6 +4590,14 @@ const NSTimeInterval kSnapshotOverlayTransition = 0.5;
   }
 }
 
+- (void)didShowPasswordInputOnHTTP {
+  web::NavigationItem* item =
+      self.webState->GetNavigationManager()->GetLastCommittedItem();
+  item->GetSSL().content_status |=

[Eugene But (OOO till 7-30), 2016/12/02 01:53:12]

Do you want to DCHECK that origin is not secure?

[lgarron, 2016/12/06 01:38:36]

Good idea; done.

+      web::SSLStatus::DISPLAYED_PASSWORD_FIELD_ON_HTTP;
+  [self didUpdateSSLStatusForCurrentNavigationItem];
+}
+
 - (void)handleSSLCertError:(NSError*)error {
   CHECK(web::IsWKWebViewSSLCertError(error));