Both of these classes have a controller_ member and are derived from SecurityInterstitialPage. SecurityInterstitialPage also creates its own ChromeControllerClient, so both classes end up with two ChromeControllerClient instances.
It seems like exposing SecurityInterstitialPage's controller as a protected method and using it in the derived classes should work.
Comment 1 by mea...@chromium.org
, Sep 1 2016