Expose passwords to JavaScript in Credential Manager API

third_party/WebKit/Source/modules/fetch/RequestInit.cpp

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "modules/fetch/RequestInit.h"
 
 #include "bindings/core/v8/Dictionary.h"
 #include "bindings/core/v8/V8ArrayBuffer.h"
 #include "bindings/core/v8/V8ArrayBufferView.h"
 #include "bindings/core/v8/V8BindingForCore.h"
 #include "bindings/core/v8/V8Blob.h"
 #include "bindings/core/v8/V8FormData.h"
 #include "bindings/core/v8/V8URLSearchParams.h"
 #include "bindings/modules/v8/V8PasswordCredential.h"
 #include "core/dom/URLSearchParams.h"
 #include "core/fileapi/Blob.h"
+#include "core/frame/Deprecation.h"
+#include "core/frame/UseCounter.h"
 #include "core/html/FormData.h"
 #include "modules/fetch/BlobBytesConsumer.h"
 #include "modules/fetch/FormDataBytesConsumer.h"
 #include "modules/fetch/Headers.h"
 #include "platform/RuntimeEnabledFeatures.h"
 #include "platform/blob/BlobData.h"
 #include "platform/network/EncodedFormData.h"
 #include "platform/weborigin/ReferrerPolicy.h"
 
 namespace blink {
@@ skipping 81 matching lines @@
   if (is_header_set) {
     V8ByteStringSequenceSequenceOrByteStringByteStringRecord::toImpl(
         isolate, v8_headers, headers, UnionTypeConversionMode::kNotNullable,
         exception_state);
     if (exception_state.HadException())
       return;
   }
 
   if (is_credential_set) {
     if (V8PasswordCredential::hasInstance(v8_credential, isolate)) {
+      Deprecation::CountDeprecation(context,
+                                    UseCounter::kCredentialManagerCustomFetch);
       // TODO(mkwst): According to the spec, we'd serialize this once we touch
       // the network. We're serializing it here, ahead of time, because lifetime
       // issues around ResourceRequest make it pretty difficult to pass a
       // PasswordCredential around at the platform level, and the hop between
       // the browser and renderer processes to deal with service workers is
       // equally painful. There should be no developer-visible difference in
       // behavior with this option, except that the `Content-Type` header will
       // be set early. That seems reasonable.
       PasswordCredential* credential =
           V8PasswordCredential::toImpl(v8_credential.As<v8::Object>());
@@ skipping 35 matching lines @@
         AtomicString("application/x-www-form-urlencoded;charset=UTF-8");
     body = new FormDataBytesConsumer(context, form_data.Release());
   } else if (v8_body->IsString()) {
     content_type = "text/plain;charset=UTF-8";
     body = new FormDataBytesConsumer(
         ToUSVString(isolate, v8_body, exception_state));
   }
 }
 
 }  // namespace blink