Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(505)

Unified Diff: net/base/transport_security_state.h

Issue 6869043: Add command-line control of the HSTS preload list. (Closed) Base URL: svn://svn.chromium.org/chrome/trunk/src/
Patch Set: Created 9 years, 8 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
« no previous file with comments | « no previous file | net/base/transport_security_state.cc » ('j') | net/base/transport_security_state.cc » ('J')
Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
Index: net/base/transport_security_state.h
===================================================================
--- net/base/transport_security_state.h (revision 81709)
+++ net/base/transport_security_state.h (working copy)
@@ -31,19 +31,21 @@
// A DomainState is the information that we persist about a given domain.
struct DomainState {
enum Mode {
+ // None means there is no HSTS for this domain.
+ MODE_NONE = 0,
// Strict mode implies:
// * We generate internal redirects from HTTP -> HTTPS.
// * Certificate issues are fatal.
- MODE_STRICT = 0,
+ MODE_STRICT = 1,
// Opportunistic mode implies:
// * We'll request HTTP URLs over HTTPS
// * Certificate issues are ignored.
- MODE_OPPORTUNISTIC = 1,
+ MODE_OPPORTUNISTIC = 2,
// SPDY_ONLY (aka X-Bodge-Transport-Security) is a hopefully temporary
// measure. It implies:
// * We'll request HTTP URLs over HTTPS iff we have SPDY support.
// * Certificate issues are fatal.
- MODE_SPDY_ONLY = 2,
+ MODE_SPDY_ONLY = 3,
};
DomainState();
@@ -122,7 +124,7 @@
static std::string CanonicalizeHost(const std::string& host);
static bool IsPreloadedSTS(const std::string& canonicalized_host,
bool sni_available,
- bool* out_include_subdomains);
+ DomainState* out);
// The set of hosts that have enabled TransportSecurity. The keys here
// are SHA256(DNSForm(domain)) where DNSForm converts from dotted form
« no previous file with comments | « no previous file | net/base/transport_security_state.cc » ('j') | net/base/transport_security_state.cc » ('J')

Powered by Google App Engine
This is Rietveld 408576698