Trigger protected password entry request on password reuse event.

components/safe_browsing/password_protection/password_protection_request.h

 // Copyright 2017 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef COMPONENTS_SAFE_BROWSING_PASSWORD_PROTECTION_PASSWORD_PROTECTION_REQUEST_H_
 #define COMPONENTS_SAFE_BROWSING_PASSWORD_PROTECTION_PASSWORD_PROTECTION_REQUEST_H_
 
 #include "base/macros.h"
 #include "base/memory/ref_counted.h"
 #include "base/task/cancelable_task_tracker.h"
@@ skipping 43 matching lines @@
     REQUEST_MALFORMED = 8,
     FETCH_FAILED = 9,
     RESPONSE_MALFORMED = 10,
     SERVICE_DESTROYED = 11,
     MAX_OUTCOME
   };
 
   PasswordProtectionRequest(const GURL& main_frame_url,
                             const GURL& password_form_action,
                             const GURL& password_form_frame_url,
+                            const std::string& legitinate_domain,

[Nathan Parker, 2017/05/12 22:27:59]

nit: spelling. legitimate_domain

[Jialiu Lin, 2017/05/13 00:24:12]

Done. 

                             LoginReputationClientRequest::TriggerType type,
                             PasswordProtectionService* pps,
                             int request_timeout_in_ms);
 
   base::WeakPtr<PasswordProtectionRequest> GetWeakPtr() {
     return weakptr_factory_.GetWeakPtr();
   }
 
   // Starts processing request by checking extended reporting and incognito
   // conditions.
@@ skipping 46 matching lines @@
 
   // Main frame URL of the login form.
   const GURL main_frame_url_;
 
   // The action URL of the password form.
   const GURL password_form_action_;
 
   // Frame url of the detected password form.
   const GURL password_form_frame_url_;
 
+  // Legitimate domain on which a password is saved and gets reused.
+  const std::string legitimate_domain_;

[Nathan Parker, 2017/05/12 22:27:59]

Could we call this "saved_domain" or "associated_domain"?  Or is
legitimate_domain used elsewhere already? I'm assuming eventually this'll be a
vector.

[Jialiu Lin, 2017/05/13 00:24:12]

Rename to "saved_domain".
"legitimate_domain" is used by PasswordReuseDetectionManager::OnReuseFound(). 
"saved_domain" is more easier to understand. 
I'll do the string to vector change later when password_manager function is
ready to expose all saved domains.

+
   // If this request is for unfamiliar login page or for a password reuse event.
   const LoginReputationClientRequest::TriggerType request_type_;
 
   // When request is sent.
   base::TimeTicks request_start_time_;
 
   // URLFetcher instance for sending request and receiving response.
   std::unique_ptr<net::URLFetcher> fetcher_;
 
   // The PasswordProtectionService instance owns |this|.
@@ skipping 13 matching lines @@
   // Needed for canceling tasks posted to different threads.
   base::CancelableTaskTracker tracker_;
 
   base::WeakPtrFactory<PasswordProtectionRequest> weakptr_factory_;
   DISALLOW_COPY_AND_ASSIGN(PasswordProtectionRequest);
 };
 
 }  // namespace safe_browsing
 
 #endif  // COMPONENTS_SAFE_BROWSING_PASSWORD_PROTECTION_PASSWORD_PROTECTION_REQUEST_H_