Show Form-Not-Secure warning on page load

components/password_manager/core/browser/password_manager.cc

Index: components/password_manager/core/browser/password_manager.cc
diff --git a/components/password_manager/core/browser/password_manager.cc b/components/password_manager/core/browser/password_manager.cc
index dc06e20c4e8d73bb9c0a8fd03124d6a5b86714f6..09fc8709d63c4718cd0bb59d7fa34fe6630dd886 100644
--- a/components/password_manager/core/browser/password_manager.cc
+++ b/components/password_manager/core/browser/password_manager.cc
@@ -16,6 +16,7 @@
 #include "base/threading/platform_thread.h"
 #include "build/build_config.h"
 #include "components/autofill/core/browser/autofill_field.h"
+#include "components/autofill/core/browser/autofill_manager.h"
 #include "components/autofill/core/browser/form_structure.h"
 #include "components/autofill/core/common/form_data_predictions.h"
 #include "components/autofill/core/common/password_form_field_prediction_map.h"
@@ -34,6 +35,7 @@
 #include "components/password_manager/core/common/password_manager_pref_names.h"
 #include "components/pref_registry/pref_registry_syncable.h"
 #include "components/prefs/pref_service.h"
+#include "components/security_state/core/security_state.h"
 #include "net/base/registry_controlled_domains/registry_controlled_domain.h"
 
 #if defined(OS_WIN)
@@ -756,6 +758,16 @@ void PasswordManager::Autofill(
   InitPasswordFormFillData(form_for_autofill, best_matches, &preferred_match,
                            wait_for_username, OtherPossibleUsernamesEnabled(),
                            &fill_data);
+  // Show a "Login not secure" warning if the experiment is enabled and the
+  // top-level page is not secure.
+  // TODO(estark): Verify that |origin| is the right URL to check here.
+  // https://crbug.com/676706
+  autofill::AutofillManager* autofill_manager =
+      client_->GetAutofillManagerForMainFrame();
+  fill_data.show_form_not_secure_warning_on_autofill =
+      security_state::IsHttpWarningInFormEnabled() && autofill_manager &&
+      !autofill_manager->client()->IsContextSecure(fill_data.origin);
+
   if (logger)
     logger->LogBoolean(Logger::STRING_WAIT_FOR_USERNAME, wait_for_username);
   UMA_HISTOGRAM_BOOLEAN(