Override DevTools security summary when a Safe Browsing warning shows.

content/public/browser/security_style_explanations.h

 // Copyright 2015 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CONTENT_PUBLIC_BROWSER_SECURITY_STYLE_EXPLANATIONS_H_
 #define CONTENT_PUBLIC_BROWSER_SECURITY_STYLE_EXPLANATIONS_H_
 
 #include <vector>
 
 #include "content/common/content_export.h"
 #include "content/public/browser/security_style_explanation.h"
 #include "third_party/WebKit/public/platform/WebSecurityStyle.h"
 
 namespace content {
 
 // SecurityStyleExplanations contains information about why a particular
 // SecurityStyle was chosen for a page. This information includes the
 // mixed content status of the page and whether the page was loaded over
 // a cryptographically secure transport. Additionally,
 // SecurityStyleExplanations contains human-readable
 // SecurityStyleExplanation objects that the embedder can use to
 // describe embedder-specific security policies. Each
 // SecurityStyleExplanation is a single security property of a page (for
 // example, an expired certificate, a valid certificate, or the presence
 // of a deprecated crypto algorithm). A single site may have multiple
 // different explanations of "secure", "warning", "broken", and "info" severity
 // levels.
 struct SecurityStyleExplanations {
   CONTENT_EXPORT SecurityStyleExplanations();
+  CONTENT_EXPORT SecurityStyleExplanations(
+      const SecurityStyleExplanations& other);
   CONTENT_EXPORT ~SecurityStyleExplanations();
 
   // True if the page was loaded over HTTPS and ran mixed (HTTP) content
   // such as scripts.
   bool ran_mixed_content;
   // True if the page was loaded over HTTPS and displayed mixed (HTTP)
   // content such as images.
   bool displayed_mixed_content;
   // True if the page was loaded over HTTPS without certificate errors,
   // but ran subresources, such as scripts, that were loaded over HTTPS
@@ skipping 16 matching lines @@
   // SecurityStyle will be downgraded to Unauthenticated as a result of
   // displaying insecure content.
   blink::WebSecurityStyle ran_insecure_content_style;
   blink::WebSecurityStyle displayed_insecure_content_style;
 
   bool scheme_is_cryptographic;
 
   // True if PKP was bypassed due to a local trust anchor.
   bool pkp_bypassed;
 
+  // User-visible summary of the security style, set only when
+  // the style cannot be determined from HTTPS status alone.
+  std::string summary;
+
   // Explanations corresponding to each security level. The embedder should
   // display explanations in the order: broken, unauthenticated, secure, info.
   std::vector<SecurityStyleExplanation> secure_explanations;
   std::vector<SecurityStyleExplanation> unauthenticated_explanations;
   std::vector<SecurityStyleExplanation> broken_explanations;
   std::vector<SecurityStyleExplanation> info_explanations;
 };
 
 }  // namespace content
 
 #endif  // CONTENT_PUBLIC_BROWSER_SECURITY_STYLE_EXPLANATION_H_