| Index: net/base/transport_security_state.h
|
| ===================================================================
|
| --- net/base/transport_security_state.h (revision 81709)
|
| +++ net/base/transport_security_state.h (working copy)
|
| @@ -31,19 +31,21 @@
|
| // A DomainState is the information that we persist about a given domain.
|
| struct DomainState {
|
| enum Mode {
|
| + // None means there is no HSTS for this domain.
|
| + MODE_NONE = 0,
|
| // Strict mode implies:
|
| // * We generate internal redirects from HTTP -> HTTPS.
|
| // * Certificate issues are fatal.
|
| - MODE_STRICT = 0,
|
| + MODE_STRICT = 1,
|
| // Opportunistic mode implies:
|
| // * We'll request HTTP URLs over HTTPS
|
| // * Certificate issues are ignored.
|
| - MODE_OPPORTUNISTIC = 1,
|
| + MODE_OPPORTUNISTIC = 2,
|
| // SPDY_ONLY (aka X-Bodge-Transport-Security) is a hopefully temporary
|
| // measure. It implies:
|
| // * We'll request HTTP URLs over HTTPS iff we have SPDY support.
|
| // * Certificate issues are fatal.
|
| - MODE_SPDY_ONLY = 2,
|
| + MODE_SPDY_ONLY = 3,
|
| };
|
|
|
| DomainState();
|
| @@ -122,7 +124,7 @@
|
| static std::string CanonicalizeHost(const std::string& host);
|
| static bool IsPreloadedSTS(const std::string& canonicalized_host,
|
| bool sni_available,
|
| - bool* out_include_subdomains);
|
| + DomainState* out);
|
|
|
| // The set of hosts that have enabled TransportSecurity. The keys here
|
| // are SHA256(DNSForm(domain)) where DNSForm converts from dotted form
|
|
|