Recommit fraudulent certificate reporting infrastructure.

net/base/transport_security_state.h

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef NET_BASE_TRANSPORT_SECURITY_STATE_H_
 #define NET_BASE_TRANSPORT_SECURITY_STATE_H_
 #pragma once
 
 #include <map>
 #include <string>
@@ skipping 95 matching lines @@
                       bool sni_available);
 
   // Returns true if |host| has any HSTS metadata, in the context of
   // |sni_available|. (This include cert-pin-only metadata).
   // In that case, *result is filled out.
   // Note that *result is always overwritten on every call.
   bool HasMetadata(DomainState* result,
                    const std::string& host,
                    bool sni_available);
 
+  // Returns true if we have a preloaded certificate pin for the |host| and if
+  // its set of required certificates is the set we expect for Google
+  // properties. If |sni_available| is true, searches the preloads defined for
+  // SNI-using hosts as well as the usual preload list.
+  //
+  // Note that like HasMetadata, if |host| matches both an exact entry and is a
+  // subdomain of another entry, the exact match determines the return value.
+  //
+  // This function is used by ChromeFraudulentCertificateReporter to determine
+  // whether or not we can automatically post fraudulent certificate reports to
+  // Google; we only do so automatically in cases when the user was trying to
+  // connect to Google in the first place.
+  static bool IsGooglePinnedProperty(const std::string& host,
+                                     bool sni_available);
+
   // Deletes all records created since a given time.
   void DeleteSince(const base::Time& time);
 
   // Returns |true| if |value| parses as a valid *-Transport-Security
   // header value.  The values of max-age and and includeSubDomains are
   // returned in |max_age| and |include_subdomains|, respectively.  The out
   // parameters are not modified if the function returns |false|.
   static bool ParseHeader(const std::string& value,
                           int* max_age,
                           bool* include_subdomains);
@@ skipping 41 matching lines @@
 
   // Our delegate who gets notified when we are dirtied, or NULL.
   Delegate* delegate_;
 
   DISALLOW_COPY_AND_ASSIGN(TransportSecurityState);
 };
 
 }  // namespace net
 
 #endif  // NET_BASE_TRANSPORT_SECURITY_STATE_H_