Update devtools security panel for HTTP-bad

chrome/browser/ssl/chrome_security_state_model_client_unittest.cc

 // Copyright 2016 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/ssl/chrome_security_state_model_client.h"
 
 #include "components/security_state/security_state_model.h"
 #include "content/public/browser/security_style_explanation.h"
 #include "content/public/browser/security_style_explanations.h"
 #include "net/cert/cert_status_flags.h"
@@ skipping 195 matching lines @@
     ASSERT_TRUE(FindSecurityStyleExplanation(
         explanations.secure_explanations, "Secure Connection", &explanation));
     EXPECT_EQ(
         "The connection to this site is encrypted and authenticated using a "
         "strong protocol (TLS 1.3), a strong key exchange (X25519), and a "
         "strong cipher (AES_128_GCM).",
         explanation.description);
   }
 }
 
+// Tests that a security level of HTTP_SHOW_WARNING produces a
+// content::SecurityStyle of UNAUTHENTICATED, with an explanation.
+TEST(ChromeSecurityStateModelClientTest, HTTPWarning) {
+  security_state::SecurityStateModel::SecurityInfo security_info;
+  content::SecurityStyleExplanations explanations;
+  security_info.security_level =
+      security_state::SecurityStateModel::HTTP_SHOW_WARNING;
+  blink::WebSecurityStyle security_style =
+      ChromeSecurityStateModelClient::GetSecurityStyle(security_info,
+                                                       &explanations);
+  EXPECT_EQ(blink::WebSecurityStyleUnauthenticated, security_style);
+  EXPECT_EQ(1u, explanations.unauthenticated_explanations.size());
+}
+
+// Tests that a security level of NONE when there is a password or
+// credit card field on HTTP produces a content::SecurityStyle of
+// UNAUTHENTICATED, with an info explanation.
+TEST(ChromeSecurityStateModelClientTest, HTTPWarningInFuture) {
+  security_state::SecurityStateModel::SecurityInfo security_info;
+  content::SecurityStyleExplanations explanations;
+  security_info.security_level = security_state::SecurityStateModel::NONE;
+  security_info.displayed_private_user_data_input_on_http = true;
+  blink::WebSecurityStyle security_style =
+      ChromeSecurityStateModelClient::GetSecurityStyle(security_info,
+                                                       &explanations);
+  EXPECT_EQ(blink::WebSecurityStyleUnauthenticated, security_style);
+  EXPECT_EQ(1u, explanations.info_explanations.size());
+}
+
 }  // namespace