Record Autofill form events specially for nonsecure pages

ios/chrome/browser/ui/autofill/autofill_client_ios.mm

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #import "ios/chrome/browser/ui/autofill/autofill_client_ios.h"
 
 #include <utility>
 
 #include "base/bind.h"
 #include "base/memory/ptr_util.h"
 #include "components/autofill/core/browser/autofill_credit_card_filling_infobar_delegate_mobile.h"
 #include "components/autofill/core/browser/autofill_save_card_infobar_delegate_mobile.h"
 #include "components/autofill/core/browser/autofill_save_card_infobar_mobile.h"
 #include "components/autofill/core/browser/ui/card_unmask_prompt_view.h"
 #include "components/autofill/core/browser/webdata/autofill_webdata_service.h"
 #include "components/autofill/core/common/autofill_pref_names.h"
 #include "components/infobars/core/infobar.h"
 #include "components/infobars/core/infobar_manager.h"
 #include "components/keyed_service/core/service_access_type.h"
 #include "components/password_manager/core/browser/password_generation_manager.h"
 #include "components/prefs/pref_service.h"
 #include "google_apis/gaia/identity_provider.h"
 #include "ios/chrome/browser/application_context.h"
 #include "ios/chrome/browser/autofill/personal_data_manager_factory.h"
 #include "ios/chrome/browser/browser_state/chrome_browser_state.h"
 #include "ios/chrome/browser/infobars/infobar_utils.h"
 #include "ios/chrome/browser/ui/autofill/card_unmask_prompt_view_bridge.h"
 #include "ios/chrome/browser/web_data_service_factory.h"
 #include "ios/public/provider/chrome/browser/chrome_browser_provider.h"
+#include "ios/web/public/navigation_item.h"

[Eugene But (OOO till 7-30), 2017/02/07 18:47:08]

s/include/import

https://google.github.io/styleguide/objcguide.xml#_import_and__include

[estark, 2017/02/07 22:40:34]

Done.

+#include "ios/web/public/navigation_manager.h"

[Eugene But (OOO till 7-30), 2017/02/07 18:47:08]

ditto

[estark, 2017/02/07 22:40:33]

Done.

+#include "ios/web/public/ssl_status.h"
+#include "ios/web/public/web_state/web_state.h"

[Eugene But (OOO till 7-30), 2017/02/07 18:47:08]

ditto

[estark, 2017/02/07 22:40:34]

Done.

 
 namespace autofill {
 
 AutofillClientIOS::AutofillClientIOS(
     ios::ChromeBrowserState* browser_state,
+    web::WebState* web_state,
     infobars::InfoBarManager* infobar_manager,
     id<AutofillClientIOSBridge> bridge,
     password_manager::PasswordGenerationManager* password_generation_manager,
     std::unique_ptr<IdentityProvider> identity_provider)
     : browser_state_(browser_state),
+      web_state_(web_state),
       infobar_manager_(infobar_manager),
       bridge_(bridge),
       password_generation_manager_(password_generation_manager),
       identity_provider_(std::move(identity_provider)),
       unmask_controller_(browser_state->GetPrefs(),
                          browser_state->IsOffTheRecord()) {}
 
 AutofillClientIOS::~AutofillClientIOS() {
   HideAutofillPopup();
 }
@@ skipping 122 matching lines @@
 void AutofillClientIOS::DidFillOrPreviewField(
     const base::string16& autofilled_value,
     const base::string16& profile_full_name) {
 }
 
 scoped_refptr<AutofillWebDataService> AutofillClientIOS::GetDatabase() {
   return ios::WebDataServiceFactory::GetAutofillWebDataForBrowserState(
       browser_state_, ServiceAccessType::EXPLICIT_ACCESS);
 }
 
-bool AutofillClientIOS::IsContextSecure(const GURL& form_origin) {
-  // TODO (sigbjorn): Return if the context is secure, not just
-  // the form_origin. See crbug.com/505388.
-  return form_origin.SchemeIsCryptographic();
+bool AutofillClientIOS::IsContextSecure() {

[Justin Donnelly, 2017/02/07 17:42:45]

Can you add a comment to this function explaining that it differs from the other
platforms? (Doesn't check RAN_INSECURE_CONTENT because the iOS web view doesn't
expose this information.)

[estark, 2017/02/07 22:40:34]

Done.

+  web::NavigationManager* manager = web_state_->GetNavigationManager();
+  web::NavigationItem* navItem = manager->GetVisibleItem();

[Eugene But (OOO till 7-30), 2017/02/07 18:47:08]

s/navItem/nav_item

[Eugene But (OOO till 7-30), 2017/02/07 18:47:08]

Do you want to use LastCommittedItem instead? 

LastCommittedItem is actual navigation item of the page. VisibleItem can be
transient or even pending item if it was not initiated by renderer.

[estark, 2017/02/07 22:40:33]

Done.

[estark, 2017/02/07 22:40:33]

Done.

+  if (!navItem)
+    return false;
+
+  const web::SSLStatus& ssl = navItem->GetSSL();
+  return navItem->GetURL().SchemeIsCryptographic() && ssl.certificate &&
+         (!net::IsCertStatusError(ssl.cert_status) ||
+          net::IsCertStatusMinorError(ssl.cert_status));

[Eugene But (OOO till 7-30), 2017/02/07 18:47:08]

Do you want to check for |SECURITY_STYLE_AUTHENTICATED| instead of checking for
scheme and cert?

[estark, 2017/02/07 22:40:34]

|security_style| doesn't exist in //content anymore, I wonder if ios should make
a similar change.

I have a slight preference for leaving this as-is to match the other platforms
as much as possible, but happy to change it if you feel strongly.

 }
 
 void AutofillClientIOS::OnFirstUserGestureObserved() {
   // TODO(gcasto): [Merge 306796] http://crbug.com/439425 Verify if this method
   // needs a real implementation or not.
   NOTIMPLEMENTED();
 }
 
 bool AutofillClientIOS::ShouldShowSigninPromo() {
   return false;
 }
 
 void AutofillClientIOS::StartSigninFlow() {
   NOTIMPLEMENTED();
 }
 
 void AutofillClientIOS::ShowHttpNotSecureExplanation() {
   NOTIMPLEMENTED();
 }
 
 }  // namespace autofill