Record Autofill form events specially for nonsecure pages

ios/chrome/browser/ui/autofill/autofill_client_ios.mm

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #import "ios/chrome/browser/ui/autofill/autofill_client_ios.h"
 
 #include <utility>
 
 #include "base/bind.h"
 #include "base/memory/ptr_util.h"
 #include "components/autofill/core/browser/autofill_credit_card_filling_infobar_delegate_mobile.h"
 #include "components/autofill/core/browser/autofill_save_card_infobar_delegate_mobile.h"
 #include "components/autofill/core/browser/autofill_save_card_infobar_mobile.h"
 #include "components/autofill/core/browser/ui/card_unmask_prompt_view.h"
 #include "components/autofill/core/browser/webdata/autofill_webdata_service.h"
 #include "components/autofill/core/common/autofill_pref_names.h"
 #include "components/infobars/core/infobar.h"
 #include "components/infobars/core/infobar_manager.h"
 #include "components/keyed_service/core/service_access_type.h"
 #include "components/password_manager/core/browser/password_generation_manager.h"
 #include "components/prefs/pref_service.h"
 #include "google_apis/gaia/identity_provider.h"
 #include "ios/chrome/browser/application_context.h"
 #include "ios/chrome/browser/autofill/personal_data_manager_factory.h"
 #include "ios/chrome/browser/browser_state/chrome_browser_state.h"
 #include "ios/chrome/browser/infobars/infobar_utils.h"
 #include "ios/chrome/browser/ui/autofill/card_unmask_prompt_view_bridge.h"
 #include "ios/chrome/browser/web_data_service_factory.h"
 #include "ios/public/provider/chrome/browser/chrome_browser_provider.h"
+#include "ios/web/public/navigation_item.h"
+#include "ios/web/public/navigation_manager.h"
+#include "ios/web/public/ssl_status.h"
+#include "ios/web/public/web_state/web_state.h"
 
 namespace autofill {
 
 AutofillClientIOS::AutofillClientIOS(
     ios::ChromeBrowserState* browser_state,
+    web::WebState* web_state,
     infobars::InfoBarManager* infobar_manager,
     id<AutofillClientIOSBridge> bridge,
     password_manager::PasswordGenerationManager* password_generation_manager,
     std::unique_ptr<IdentityProvider> identity_provider)
     : browser_state_(browser_state),
+      web_state_(web_state),
       infobar_manager_(infobar_manager),
       bridge_(bridge),
       password_generation_manager_(password_generation_manager),
       identity_provider_(std::move(identity_provider)),
       unmask_controller_(browser_state->GetPrefs(),
                          browser_state->IsOffTheRecord()) {}
 
 AutofillClientIOS::~AutofillClientIOS() {
   HideAutofillPopup();
 }
@@ skipping 123 matching lines @@
     const base::string16& autofilled_value,
     const base::string16& profile_full_name) {
 }
 
 scoped_refptr<AutofillWebDataService> AutofillClientIOS::GetDatabase() {
   return ios::WebDataServiceFactory::GetAutofillWebDataForBrowserState(
       browser_state_, ServiceAccessType::EXPLICIT_ACCESS);
 }
 
 bool AutofillClientIOS::IsContextSecure(const GURL& form_origin) {
   // TODO (sigbjorn): Return if the context is secure, not just

[Mathieu, 2017/02/04 02:34:57]

I feel like this TODO could be addressed if we moved the impl that you added in
IsMainUrlSecure to this?

[estark, 2017/02/06 22:51:02]

If you don't have any qualms about making a functionality change in this patch,
then that's fine with me. Updated to remove the GURL argument from
IsContextSecure, removed IsMainUrlSecure, and moved the implementation in here.

   // the form_origin. See crbug.com/505388.
   return form_origin.SchemeIsCryptographic();
 }
 
+bool AutofillClientIOS::IsMainUrlSecure() {

[Mathieu, 2017/02/04 02:34:57]

By splitting IsContextSecure and IsMainUrlSecure on iOS, aren't you logging
based on one logic (IsMainUrlSecure) while deciding on the Form HTTP warning
using another logic (IsContextSecure)?

[estark, 2017/02/06 22:51:02]

Yes, but Form-Not-Secure warnings aren't enabled for iOS so it doesn't really
matter -- we won't be looking at these metrics for iOS. (I suppose, since they
don't matter for iOS, I could have just used IsContextSecure as-is with the
faulty implementation on iOS, but I thought it would be a recipe for disaster to
have a metric that's recorded under very different conditions on different
platforms.)

Anyway, I've done as you suggested and gotten rid of IsMainUrlSecure, so this
isn't a problem anymore.

+  web::NavigationManager* manager = web_state_->GetNavigationManager();
+  web::NavigationItem* navItem = manager->GetVisibleItem();
+  if (!navItem)
+    return false;
+
+  const web::SSLStatus& ssl = navItem->GetSSL();
+  return navItem->GetURL().SchemeIsCryptographic() && ssl.certificate &&
+         (!net::IsCertStatusError(ssl.cert_status) ||
+          net::IsCertStatusMinorError(ssl.cert_status));
+}
+
 void AutofillClientIOS::OnFirstUserGestureObserved() {
   // TODO(gcasto): [Merge 306796] http://crbug.com/439425 Verify if this method
   // needs a real implementation or not.
   NOTIMPLEMENTED();
 }
 
 bool AutofillClientIOS::ShouldShowSigninPromo() {
   return false;
 }
 
 void AutofillClientIOS::StartSigninFlow() {
   NOTIMPLEMENTED();
 }
 
 void AutofillClientIOS::ShowHttpNotSecureExplanation() {
   NOTIMPLEMENTED();
 }
 
 }  // namespace autofill