Make incognito windows not inherit HSTS state from the main profile.

chrome/browser/profiles/off_the_record_profile_io_data.h

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CHROME_BROWSER_PROFILES_OFF_THE_RECORD_PROFILE_IO_DATA_H_
 #define CHROME_BROWSER_PROFILES_OFF_THE_RECORD_PROFILE_IO_DATA_H_
 #pragma once
 
 #include "base/basictypes.h"
 #include "base/callback.h"
 #include "base/file_path.h"
 #include "base/hash_tables.h"
 #include "base/memory/ref_counted.h"
 #include "base/memory/scoped_ptr.h"
 #include "chrome/browser/profiles/profile_io_data.h"
 
 class ChromeURLRequestContext;
 class ChromeURLRequestContextGetter;
 class Profile;
 namespace net {
 class HttpServerPropertiesImpl;
+class TransportSecurityState;
 }  // namespace net
 
 // OffTheRecordProfile owns a OffTheRecordProfileIOData::Handle, which holds a
 // reference to the OffTheRecordProfileIOData. OffTheRecordProfileIOData is
 // intended to own all the objects owned by OffTheRecordProfile which live on
 // the IO thread, such as, but not limited to, network objects like
 // CookieMonster, HttpTransactionFactory, etc. OffTheRecordProfileIOData is
 // owned by the OffTheRecordProfile and OffTheRecordProfileIOData's
 // ChromeURLRequestContexts. When all of them go away, then ProfileIOData will
 // be deleted. Note that the OffTheRecordProfileIOData will typically outlive
@@ skipping 70 matching lines @@
       AcquireMediaRequestContext() const OVERRIDE;
   virtual scoped_refptr<ChromeURLRequestContext>
       AcquireIsolatedAppRequestContext(
           scoped_refptr<ChromeURLRequestContext> main_context,
           const std::string& app_id) const OVERRIDE;
 
   mutable scoped_ptr<net::HttpServerPropertiesImpl> http_server_properties_;
 
   mutable scoped_ptr<net::HttpTransactionFactory> main_http_factory_;
   mutable scoped_ptr<net::FtpTransactionFactory> ftp_factory_;
+  mutable scoped_ptr<net::TransportSecurityState> transport_security_state_;

[wtc, 2011/12/20 22:14:42]

Can we just use the transport_security_state_ member of the
base class?

[agl, 2012/01/03 20:29:50]

Ah, yes, we can. Done. (In fact, I've moved the persister out of the base class
since the incognito class doesn't use it any longer.)

 
   DISALLOW_COPY_AND_ASSIGN(OffTheRecordProfileIOData);
 };
 
 #endif  // CHROME_BROWSER_PROFILES_OFF_THE_RECORD_PROFILE_IO_DATA_H_