Apply HSTS rules to also upgrade ws:// -> wss:// if appropriate. This avoids

net/socket_stream/socket_stream_job.cc

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/socket_stream/socket_stream_job.h"
 
 #include "base/memory/singleton.h"
+#include "net/base/transport_security_state.h"
 #include "net/socket_stream/socket_stream_job_manager.h"
+#include "net/url_request/url_request_context.h"
 
 namespace net {
 
 // static
 SocketStreamJob::ProtocolFactory* SocketStreamJob::RegisterProtocolFactory(
     const std::string& scheme, ProtocolFactory* factory) {
   return SocketStreamJobManager::GetInstance()->RegisterProtocolFactory(
       scheme, factory);
 }
 
 // static
 SocketStreamJob* SocketStreamJob::CreateSocketStreamJob(
-    const GURL& url, SocketStream::Delegate* delegate) {
-  return SocketStreamJobManager::GetInstance()->CreateJob(url, delegate);
+    const GURL& url,
+    SocketStream::Delegate* delegate,
+    const URLRequestContext& context) {
+  GURL socket_url(url);
+  TransportSecurityState::DomainState domain_state;
+  if (url.scheme() == "ws" &&
+      context.transport_security_state() &&
+      context.transport_security_state()->IsEnabledForHost(
+          &domain_state, url.host(), context.IsSNIAvailable()) &&
+      domain_state.mode == TransportSecurityState::DomainState::MODE_STRICT) {
+    url_canon::Replacements<char> replacements;
+    static const char kNewScheme[] = "wss";
+    replacements.SetScheme(kNewScheme,
+                           url_parse::Component(0, strlen(kNewScheme)));
+    socket_url = url.ReplaceComponents(replacements);
+  }
+  return SocketStreamJobManager::GetInstance()->CreateJob(socket_url, delegate);
 }
 
 SocketStreamJob::SocketStreamJob() {}
 
 SocketStream::UserData* SocketStreamJob::GetUserData(const void* key) const {
   return socket_->GetUserData(key);
 }
 
 void SocketStreamJob::SetUserData(const void* key,
                                   SocketStream::UserData* data) {
@@ skipping 17 matching lines @@
   socket_->RestartWithAuth(username, password);
 }
 
 void SocketStreamJob::DetachDelegate() {
   socket_->DetachDelegate();
 }
 
 SocketStreamJob::~SocketStreamJob() {}
 
 }  // namespace net