Add metrics to measure localhost resources in non-secure contexts.

third_party/WebKit/Source/core/loader/MixedContentChecker.cpp

 /*
  * Copyright (C) 2012 Google Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions
  * are met:
  *
  * 1.  Redistributions of source code must retain the above copyright
  *     notice, this list of conditions and the following disclaimer.
  * 2.  Redistributions in binary form must reproduce the above copyright
@@ skipping 412 matching lines @@
     LocalFrame* frame,
     const AtomicString& resourceIPAddress) {
   if (!frame || !frame->document() || !frame->document()->loader())
     return;
 
   // Just count these for the moment, don't block them.
   if (NetworkUtils::isReservedIPAddress(resourceIPAddress) &&
       frame->document()->addressSpace() == WebAddressSpacePublic) {
     UseCounter::count(frame->document(),
                       UseCounter::MixedContentPrivateHostnameInPublicHostname);
+    // We can simplify the IP checks here, as we've already verified that
+    // |resourceIPAddress| is a reserved IP address, which means it's also a
+    // valid IP address in a normalized form.
+    if (resourceIPAddress.startsWith("127.0.0.") ||
+        resourceIPAddress == "[::1]") {
+      UseCounter::count(frame->document(),
+                        frame->document()->isSecureContext()
+                            ? UseCounter::LoopbackEmbeddedInSecureContext
+                            : UseCounter::LoopbackEmbeddedInNonSecureContext);
+    }
   }
 }
 
 Frame* MixedContentChecker::effectiveFrameForFrameType(
     LocalFrame* frame,
     WebURLRequest::FrameType frameType) {
   // If we're loading the main resource of a subframe, ensure that we check
   // against the parent of the active frame, rather than the frame itself.
   if (frameType != WebURLRequest::FrameTypeNested)
     return frame;
@@ skipping 51 matching lines @@
   }
 
   bool strictMixedContentCheckingForPlugin =
       mixedFrame->settings() &&
       mixedFrame->settings()->strictMixedContentCheckingForPlugin();
   return WebMixedContent::contextTypeFromRequestContext(
       request.requestContext(), strictMixedContentCheckingForPlugin);
 }
 
 }  // namespace blink