Implement 'Not secure' warning for non-secure pages in Incognito mode

components/security_state/content/content_utils_unittest.cc

Index: components/security_state/content/content_utils_unittest.cc
diff --git a/components/security_state/content/content_utils_unittest.cc b/components/security_state/content/content_utils_unittest.cc
index e0e37e0a45fd2ed2d059ba41574200378a67922b..a036013d26e2b65f280576a8753b96b6661c8dc7 100644
--- a/components/security_state/content/content_utils_unittest.cc
+++ b/components/security_state/content/content_utils_unittest.cc
@@ -4,8 +4,11 @@
 
 #include "components/security_state/content/content_utils.h"
 
+#include <vector>
+
 #include "base/command_line.h"
 #include "base/test/histogram_tester.h"
+#include "base/test/scoped_command_line.h"
 #include "components/security_state/core/security_state.h"
 #include "components/security_state/core/switches.h"
 #include "content/public/browser/security_style_explanation.h"
@@ -253,6 +256,21 @@ TEST(SecurityStateContentUtilsTest, HTTPWarning) {
   EXPECT_EQ(blink::kWebSecurityStyleNeutral, security_style);
   // Verify only one explanation was shown when Form Not Secure is triggered.
   EXPECT_EQ(1u, explanations.neutral_explanations.size());
+
+  {
+    // Verify that two explanations are shown when the Incognito and
+    // FormNotSecure flags are both set.
+    base::test::ScopedCommandLine scoped_command_line;
+    scoped_command_line.GetProcessCommandLine()->AppendSwitchASCII(
+        security_state::switches::kMarkHttpAs,
+        security_state::switches::kMarkHttpAsNonSecureWhileIncognito);
+    explanations.neutral_explanations.clear();
+    security_info.displayed_credit_card_field_on_http = true;
+    security_info.is_incognito = true;
+    security_style = GetSecurityStyle(security_info, &explanations);
+    EXPECT_EQ(blink::kWebSecurityStyleNeutral, security_style);
+    EXPECT_EQ(2u, explanations.neutral_explanations.size());
+  }
 }
 
 // Tests that an explanation is provided if a certificate is missing a