Show interstitial on a password on focus ping with PHISHING verdict.

components/safe_browsing/csd.proto

Index: components/safe_browsing/csd.proto
diff --git a/components/safe_browsing/csd.proto b/components/safe_browsing/csd.proto
index 7bb5920bd7caebe6c083550bfb8806447f7b7e24..8d8b4158c78d31391c3f338eb1f3093e15e529a5 100644
--- a/components/safe_browsing/csd.proto
+++ b/components/safe_browsing/csd.proto
@@ -262,6 +262,10 @@ message LoginReputationClientResponse {
 
   // Deprecated.
   optional bool DEPRECATED_cache_expression_exact_match = 4 [deprecated = true];
+
+  // A token unique to each request which correlates response and post-warning
+  // actions.
+  optional bytes verdict_token = 5;
 }
 
 message ClientMalwareResponse {
@@ -904,6 +908,7 @@ message ClientSafeBrowsingReportRequest {
     DANGEROUS_DOWNLOAD_RECOVERY = 6;
     DANGEROUS_DOWNLOAD_WARNING = 7;
     DANGEROUS_DOWNLOAD_BY_API = 10;
+    PASSWORD_PROTECTION_PHISHING_URL = 12;

[vakh (use Gerrit instead), 2017/06/01 18:30:09]

URL_PHISHING_PASSWORD_PROTECTION (to keep it consistent with the rest of the
types)?

[Jialiu Lin, 2017/06/01 18:53:33]

Acknowledged
Good point! It seems we have some inconsistency here even without
PASSWORD_PROTECTION_PHISHING_URL.  Apparently CLIENT_SIDE_PHISHING/MALWARE_URL
put the _URL at the end. Since the server side proto has already been landed
with PHISHING_PASSWORD_PROTECTION_URL, let's keep it this way for now. 

Ideally, we probably should remove _URL suffix for Client side detection and
password protection. I filed crbug.com/728741 for this purpose.  

   }
 
   message HTTPHeader {
@@ -984,9 +989,10 @@ message ClientSafeBrowsingReportRequest {
   // Whether user visited this origin before.
   optional bool repeat_visit = 9;
 
-  // The same token in ClientDownloadResponse. This field is only set if its
-  // report type is DANGEROUS_DOWNLOAD_RECOVERY, DANGEROUS_DOWNLOAD_WARNING or
-  // DANGEROUS_DOWNLOAD_BY_API.
+  // The same token in ClientDownloadResponse or LoginReputationClientResponse.
+  // This field is only set if its report type is DANGEROUS_DOWNLOAD_RECOVERY,
+  // DANGEROUS_DOWNLOAD_WARNING, DANGEROUS_DOWNLOAD_BY_API or
+  // PASSWORD_PROTECTION_PHISHING_URL.
   optional bytes token = 15;
 }