Show interstitial on a password on focus ping with PHISHING verdict.

components/safe_browsing/csd.proto

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 //
 // This proto file includes:
 // (1) Client side phishing and malware detection request and response
 //   protocol buffers.  Those protocol messages should be kept in sync
 //   with the server implementation.
 //
 // (2) Safe Browsing reporting protocol buffers.
@@ skipping 244 matching lines @@
   //    www.google.com/foo/bar?param=val -> google.com
   //    www.geocities.com/foo/bar.html -> geocities.com/foo
   //    adwords.blogspot.com/index.html -> adwords.blogspot.com
   //
   // The pattern will always match the page_url of the request, and will be
   // a substring of page_url.
   optional string cache_expression = 3;
 
   // Deprecated.
   optional bool DEPRECATED_cache_expression_exact_match = 4 [deprecated = true];
+
+  // A token unique to each request which correlates response and post-warning
+  // actions.
+  optional bytes verdict_token = 5;
 }
 
 message ClientMalwareResponse {
   required bool blacklist = 1;
   // The confirmed blacklisted bad IP and its url, which will be shown in
   // malware warning, if the blacklist verdict is true.
   // This IP string could be either in IPv4 or IPv6 format, which is the same
   // as the ones client sent to server.
   optional string bad_ip = 2;
   optional string bad_url = 3;
@@ skipping 622 matching lines @@
   enum ReportType {
     UNKNOWN = 0;
     URL_PHISHING = 1;
     URL_MALWARE = 2;
     URL_UNWANTED = 3;
     CLIENT_SIDE_PHISHING_URL = 4;
     CLIENT_SIDE_MALWARE_URL = 5;
     DANGEROUS_DOWNLOAD_RECOVERY = 6;
     DANGEROUS_DOWNLOAD_WARNING = 7;
     DANGEROUS_DOWNLOAD_BY_API = 10;
+    PASSWORD_PROTECTION_PHISHING_URL = 12;
   }
 
   message HTTPHeader {
     required bytes name = 1;
     optional bytes value = 2;
   }
 
   message HTTPRequest {
     message FirstLine {
       optional bytes verb = 1;
@@ skipping 60 matching lines @@
   // csd_frontend
   repeated string client_asn = 6;
   optional string client_country = 7;
 
   // Whether user chose to proceed.
   optional bool did_proceed = 8;
 
   // Whether user visited this origin before.
   optional bool repeat_visit = 9;
 
-  // The same token in ClientDownloadResponse. This field is only set if its
-  // report type is DANGEROUS_DOWNLOAD_RECOVERY, DANGEROUS_DOWNLOAD_WARNING or
-  // DANGEROUS_DOWNLOAD_BY_API.
+  // The same token in ClientDownloadResponse or LoginReputationClientResponse.
+  // This field is only set if its report type is DANGEROUS_DOWNLOAD_RECOVERY,
+  // DANGEROUS_DOWNLOAD_WARNING, DANGEROUS_DOWNLOAD_BY_API or
+  // PASSWORD_PROTECTION_PHISHING_URL.
   optional bytes token = 15;
 }
 
 // An HTML Element on the page (eg: iframe, div, script, etc).
 message HTMLElement {
   // Id of this element.
   optional int32 id = 1;
 
   // The tag type of this element (eg: iframe, div, script, etc).
   optional string tag = 2;
@@ skipping 36 matching lines @@
 // There is no response (an empty body) to this request.
 message NotificationImageReportRequest {
   optional string notification_origin = 1;  // Src-origin of the notification.
   optional ImageData image = 2;             // The bitmap of the image.
 
   // Note that the image URL is deliberately omitted as it would be untrusted,
   // since the notification image fetch may be intercepted by a Service Worker
   // (even if the image URL is cross-origin). Otherwise a website could mislead
   // Safe Browsing into associating phishing image bitmaps with safe image URLs.
 }