https://codereview.chromium.org/2917873004/

> Also, we really ought to have an iOS test for this, but I can't remember how
to
> write such tests. I think it's okay to land as-is without adding one, but
maybe
> we can add a test as a follow-up. eugenebut@ can probably help with that.
iOS team would really appreciate the test, which should not be hard to write:

typedef web::WebTestWithWebController IOSSecurityStateTabHelperTest;
TEST_F(IOSSecurityStateTabHelperTest, SecurityInfo) {
  AddPendingItem(GURL("http://chromium.test"), ui::PAGE_TRANSITION_TYPED);
  web::NavigationItem* item =
      web_state()->GetNavigationManager()->GetVisibleItem();
  // configure |item|
  
  // add |TestBrowserState* test_browser_state()| to web::WebTest, because
  // |test_browser_state()| does not exist.
  test_browser_state()->SetOffTheRecord(...)

  IOSSecurityStateTabHelper::CreateForWebState(web_state());
  security_state::SecurityInfo info;
  IOSSecurityStateTabHelper::FromWebState(web_state())->GetSecurityInfo(&info);
  // verify |info|.
}