Clear password values before sending them to the renderer process.

components/autofill/core/common/password_form_fill_data.h

Index: components/autofill/core/common/password_form_fill_data.h
diff --git a/components/autofill/core/common/password_form_fill_data.h b/components/autofill/core/common/password_form_fill_data.h
index fd0f64fe84a792d8c66ba66428c36b1d316b1e7b..6c9c8205fd2f9f1959fc9a93a9fd64ea3671a1c3 100644
--- a/components/autofill/core/common/password_form_fill_data.h
+++ b/components/autofill/core/common/password_form_fill_data.h
@@ -96,6 +96,10 @@ void InitPasswordFormFillData(
     bool enable_other_possible_usernames,
     PasswordFormFillData* result);
 
+// Renderer needs to have only a password that should be autofilled, all other
+// passwords might be safety erased.
+PasswordFormFillData ClearPasswordValues(const PasswordFormFillData& data);
+
 }  // namespace autofill
 
 #endif  // COMPONENTS_AUTOFILL_CORE_COMMON_PASSWORD_FORM_FILL_DATA_H__