Show FormNotSecure warnings on sensitive inputs in non-secure contexts

chrome/browser/autofill/autofill_interactive_uitest.cc

 // Copyright (c) 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include <string>
 
 #include "base/command_line.h"
 #include "base/files/file_util.h"
 #include "base/macros.h"
 #include "base/memory/ref_counted.h"
@@ skipping 74 matching lines @@
     " <input type=\"text\" id=\"zip\"><br>"
     "<label for=\"country\">Country:</label>"
     " <select id=\"country\">"
     " <option value=\"\" selected=\"yes\">--</option>"
     " <option value=\"CA\">Canada</option>"
     " <option value=\"US\">United States</option>"
     " </select><br>"
     "<label for=\"phone\">Phone number:</label>"
     " <input type=\"text\" id=\"phone\"><br>"
     "</form>";
-static const char kTestPasswordFormString[] =
-    "<form>"
-    "<label for=\"user\">User:</label>"
-    " <input id=\"user\" type=\"text\" name=\"name\""
-             "onfocus=\"domAutomationController.send(true)\">"
-    "<br>"
-    "<label for=\"password\">Password:</label>"
-    " <input id=\"password\" type=\"password\" name=\"password\""
-             "onfocus=\"domAutomationController.send(true)\">"
-    "<br>"
-    "<input type=\"submit\" value=\"Submit\">"
-    "</form>";
 
 // TODO(crbug.com/609861): Remove the autocomplete attribute from the textarea
 // field when the bug is fixed.
 static const char kTestEventFormString[] =
     "<script type=\"text/javascript\">"
     "var inputfocus = false;"
     "var inputkeydown = false;"
     "var inputinput = false;"
     "var inputchange = false;"
     "var inputkeyup = false;"
@@ skipping 1603 matching lines @@
       GetRenderViewHost(),
       "document.querySelector('input').autocomplete = 'off';"));
 
   // Press the down arrow to select the suggestion and attempt to preview the
   // autofilled form.
   SendKeyToPopupAndWait(ui::DomKey::ARROW_DOWN);
 }
 
 IN_PROC_BROWSER_TEST_F(AutofillInteractiveTest,
                        PastedPasswordIsSaved) {
-  ASSERT_NO_FATAL_FAILURE(ui_test_utils::NavigateToURL(browser(),
-      GURL(std::string(kDataURIPrefix) + kTestPasswordFormString)));
+  // Serve test page from a HTTPS server so that Form Not Secure warnings do not
+  // interfere with the test.
+  net::EmbeddedTestServer https_server(net::EmbeddedTestServer::TYPE_HTTPS);
+  net::SSLServerConfig ssl_config;
+  ssl_config.client_cert_type =
+      net::SSLServerConfig::ClientCertType::NO_CLIENT_CERT;
+  https_server.SetSSLConfig(net::EmbeddedTestServer::CERT_OK, ssl_config);
+  https_server.ServeFilesFromSourceDirectory("chrome/test/data");
+  ASSERT_TRUE(https_server.Start());
+
+  GURL url = https_server.GetURL("/autofill/autofill_password_form.html");
+  ASSERT_NO_FATAL_FAILURE(ui_test_utils::NavigateToURL(browser(), url));
+
   ASSERT_TRUE(content::ExecuteScript(
       GetRenderViewHost(),
       "document.getElementById('user').value = 'user';"));
   FocusFieldByName("password");
   PasteStringAndWait("foobar");
 }
 
 }  // namespace autofill