Show Form-Not-Secure warning on page load

components/autofill/content/renderer/password_autofill_agent.cc

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "components/autofill/content/renderer/password_autofill_agent.h"
 
 #include <stddef.h>
 
 #include <memory>
 #include <string>
@@ skipping 868 matching lines @@
 
   // Chrome should never show more than one account for a password element since
   // this implies that the username element cannot be modified. Thus even if
   // |show_all| is true, check if the element in question is a password element
   // for the call to ShowSuggestionPopup.
   return ShowSuggestionPopup(*password_info, element,
                              show_all && !element.isPasswordField(),
                              element.isPasswordField());
 }
 
+void PasswordAutofillAgent::ShowNotSecureWarning(
+    const blink::WebInputElement& element) {
+  FormData form;
+  FormFieldData field;
+  form_util::FindFormAndFieldForFormControlElement(element, &form, &field);
+  GetPasswordManagerDriver()->ShowNotSecureWarning(
+      field.text_direction,
+      render_frame()->GetRenderView()->ElementBoundsInWindow(element));
+}
+
 bool PasswordAutofillAgent::OriginCanAccessPasswordManager(
     const blink::WebSecurityOrigin& origin) {
   return origin.canAccessPasswordManager();
 }
 
 void PasswordAutofillAgent::OnDynamicFormsSeen() {
   SendPasswordForms(false /* only_visible */);
 }
 
 void PasswordAutofillAgent::AJAXSucceeded() {
@@ skipping 343 matching lines @@
   if (form_data.wait_for_username)
     return;
 
   for (auto element : elements) {
     blink::WebInputElement username_element =
         !element.isPasswordField() ? element : password_to_username_[element];
     blink::WebInputElement password_element =
         element.isPasswordField()
             ? element
             : web_input_to_password_info_[element].password_field;
-    FillFormOnPasswordReceived(
-        form_data, username_element, password_element,
-        &field_value_and_properties_map_,
-        base::Bind(&PasswordValueGatekeeper::RegisterElement,
-                   base::Unretained(&gatekeeper_)),
-        logger.get());
+    if (FillFormOnPasswordReceived(
+            form_data, username_element, password_element,
+            &field_value_and_properties_map_,
+            base::Bind(&PasswordValueGatekeeper::RegisterElement,
+                       base::Unretained(&gatekeeper_)),
+            logger.get())) {
+      if (form_data.show_form_not_secure_warning_on_autofill)
+        autofill_agent_->ShowNotSecureWarning(username_element);
+    }
   }
 }
 
 void PasswordAutofillAgent::GetFillableElementFromFormData(
     int key,
     const PasswordFormFillData& form_data,
     RendererSavePasswordProgressLogger* logger,
     std::vector<blink::WebInputElement>* elements) {
   DCHECK(elements);
   bool ambiguous_or_empty_names =
@@ skipping 221 matching lines @@
 PasswordAutofillAgent::GetPasswordManagerDriver() {
   if (!password_manager_driver_) {
     render_frame()->GetRemoteInterfaces()->GetInterface(
         mojo::MakeRequest(&password_manager_driver_));
   }
 
   return password_manager_driver_;
 }
 
 }  // namespace autofill