Record Autofill form events specially for nonsecure pages

ios/chrome/browser/ui/autofill/autofill_client_ios.mm

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #import "ios/chrome/browser/ui/autofill/autofill_client_ios.h"
 
 #include <utility>
 
 #include "base/bind.h"
 #include "base/memory/ptr_util.h"
 #include "components/autofill/core/browser/autofill_credit_card_filling_infobar_delegate_mobile.h"
 #include "components/autofill/core/browser/autofill_save_card_infobar_delegate_mobile.h"
 #include "components/autofill/core/browser/autofill_save_card_infobar_mobile.h"
 #include "components/autofill/core/browser/ui/card_unmask_prompt_view.h"
 #include "components/autofill/core/browser/webdata/autofill_webdata_service.h"
 #include "components/autofill/core/common/autofill_pref_names.h"
 #include "components/infobars/core/infobar.h"
 #include "components/infobars/core/infobar_manager.h"
 #include "components/keyed_service/core/service_access_type.h"
 #include "components/password_manager/core/browser/password_generation_manager.h"
 #include "components/prefs/pref_service.h"
 #include "google_apis/gaia/identity_provider.h"
 #include "ios/chrome/browser/application_context.h"
 #include "ios/chrome/browser/autofill/personal_data_manager_factory.h"
 #include "ios/chrome/browser/browser_state/chrome_browser_state.h"
 #include "ios/chrome/browser/infobars/infobar_utils.h"
 #include "ios/chrome/browser/ui/autofill/card_unmask_prompt_view_bridge.h"
 #include "ios/chrome/browser/web_data_service_factory.h"
 #include "ios/public/provider/chrome/browser/chrome_browser_provider.h"
+#import "ios/web/public/navigation_item.h"
+#import "ios/web/public/navigation_manager.h"
+#include "ios/web/public/ssl_status.h"
+#import "ios/web/public/web_state/web_state.h"
 
 #if !defined(__has_feature) || !__has_feature(objc_arc)
 #error "This file requires ARC support."
 #endif
 
 namespace autofill {
 
 AutofillClientIOS::AutofillClientIOS(
     ios::ChromeBrowserState* browser_state,
+    web::WebState* web_state,
     infobars::InfoBarManager* infobar_manager,
     id<AutofillClientIOSBridge> bridge,
     password_manager::PasswordGenerationManager* password_generation_manager,
     std::unique_ptr<IdentityProvider> identity_provider)
     : browser_state_(browser_state),
+      web_state_(web_state),
       infobar_manager_(infobar_manager),
       bridge_(bridge),
       password_generation_manager_(password_generation_manager),
       identity_provider_(std::move(identity_provider)),
       unmask_controller_(browser_state->GetPrefs(),
                          browser_state->IsOffTheRecord()) {}
 
 AutofillClientIOS::~AutofillClientIOS() {
   HideAutofillPopup();
 }
@@ skipping 122 matching lines @@
 void AutofillClientIOS::DidFillOrPreviewField(
     const base::string16& autofilled_value,
     const base::string16& profile_full_name) {
 }
 
 scoped_refptr<AutofillWebDataService> AutofillClientIOS::GetDatabase() {
   return ios::WebDataServiceFactory::GetAutofillWebDataForBrowserState(
       browser_state_, ServiceAccessType::EXPLICIT_ACCESS);
 }
 
-bool AutofillClientIOS::IsContextSecure(const GURL& form_origin) {
-  // TODO (sigbjorn): Return if the context is secure, not just
-  // the form_origin. See crbug.com/505388.
-  return form_origin.SchemeIsCryptographic();
+bool AutofillClientIOS::IsContextSecure() {
+  // This implementation differs slightly from other platforms. Other platforms'
+  // implementations check for the presence of active mixed content, but because
+  // the iOS web view blocks active mixed content without an option to run it,
+  // there is no need to check for active mixed conent here.
+  web::NavigationManager* manager = web_state_->GetNavigationManager();
+  web::NavigationItem* nav_item = manager->GetLastCommittedItem();
+  if (!nav_item)
+    return false;
+
+  const web::SSLStatus& ssl = nav_item->GetSSL();
+  return nav_item->GetURL().SchemeIsCryptographic() && ssl.certificate &&
+         (!net::IsCertStatusError(ssl.cert_status) ||
+          net::IsCertStatusMinorError(ssl.cert_status));
 }
 
 void AutofillClientIOS::OnFirstUserGestureObserved() {
   // TODO(gcasto): [Merge 306796] http://crbug.com/439425 Verify if this method
   // needs a real implementation or not.
   NOTIMPLEMENTED();
 }
 
 bool AutofillClientIOS::ShouldShowSigninPromo() {
   return false;
 }
 
 void AutofillClientIOS::StartSigninFlow() {
   NOTIMPLEMENTED();
 }
 
 void AutofillClientIOS::ShowHttpNotSecureExplanation() {
   NOTIMPLEMENTED();
 }
 
 }  // namespace autofill