iOS: Mark HTTP pages with password fields with an omnibox icon.

ios/chrome/browser/passwords/password_controller.mm

Index: ios/chrome/browser/passwords/password_controller.mm
diff --git a/ios/chrome/browser/passwords/password_controller.mm b/ios/chrome/browser/passwords/password_controller.mm
index d68d201dfa0e955252d01514307876702d8d0b6e..5d99a653fab5088d8c515fabf80e7b465100d446 100644
--- a/ios/chrome/browser/passwords/password_controller.mm
+++ b/ios/chrome/browser/passwords/password_controller.mm
@@ -42,6 +42,7 @@
 #include "ios/web/public/url_scheme_util.h"
 #import "ios/web/public/web_state/js/crw_js_injection_receiver.h"
 #import "ios/web/public/web_state/web_state.h"
+#include "ios/web/web_state/web_state_impl.h"

[lgarron, 2016/11/29 03:48:49]

This is giving me:

    You added one or more #includes that violate checkdeps rules.
      ios/chrome/browser/passwords/password_controller.mm
          Illegal include: "ios/web/web_state/web_state_impl.h"

Should we update the deps, or do I need to work around this?

[estark, 2016/11/29 21:28:48]

I'm guessing ios/chrome is only allowed to depend on public ios/web interfaces,
just as //chrome is only allowed to depend on //content/public.

Can you instead move the OnSensitiveInputShownOnHttp method on to the public
WebState interface in ios/web/public/web_state/web_state.h?

[Eugene But (OOO till 7-30), 2016/11/30 17:58:41]

Yep, ios/chrome can not depend on non-public ios/web. Same as for content.

[lgarron, 2016/12/02 01:21:52]

I've added it to the public interface (and removed the static_cast in below in
this file.)

 #include "url/gurl.h"
 
 using password_manager::PasswordFormManager;
@@ -548,6 +549,14 @@ bool GetPageURLAndCheckTrustLevel(web::WebState* web_state, GURL* page_url) {
     return;
 
   if (!forms.empty()) {
+    // Notify web_state about password forms, so that this can be taken into
+    // account for the security

[estark, 2016/11/29 21:28:48]

nit: unfinished sentence?

[lgarron, 2016/12/02 01:21:52]

Fixed.

+    if (webStateObserverBridge_ && webStateObserverBridge_->web_state()) {
+      // TODO: Only do this for HTTP.

[lgarron, 2016/11/29 03:48:49]

Note: Haven't gotten to this, since it's the "easy" part.

[lgarron, 2016/12/02 01:21:52]

Done.

+      static_cast<web::WebStateImpl*>(webStateObserverBridge_->web_state())
+          ->OnSensitiveInputShownOnHttp();
+    }
+
     // Invoke the password manager callback to autofill password forms
     // on the loaded page.
     passwordManager_->OnPasswordFormsParsed(passwordManagerDriver_.get(),