Forget SSL error exceptions when good certs seen for regular requests.

content/browser/ssl/ssl_policy_backend.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "content/browser/ssl/ssl_policy_backend.h"
 
 #include "content/browser/frame_host/navigation_controller_impl.h"
 #include "content/public/browser/browser_context.h"
 #include "content/public/browser/ssl_host_state_delegate.h"
 
@@ skipping 13 matching lines @@
 }
 
 bool SSLPolicyBackend::DidHostRunInsecureContent(const std::string& host,
                                                  int pid) const {
   if (!ssl_host_state_delegate_)
     return false;
 
   return ssl_host_state_delegate_->DidHostRunInsecureContent(host, pid);
 }
 
+void SSLPolicyBackend::RevokeUserAllowExceptions(const std::string& host) {
+  if (!ssl_host_state_delegate_)
+    return;
+
+  ssl_host_state_delegate_->RevokeUserAllowExceptions(host);
+}
+
+bool SSLPolicyBackend::HasAllowException(const std::string& host) {

[davidben, 2015/04/21 18:09:00]

Should this account for a NULL delegate? The others do.

[jww, 2015/04/21 18:18:15]

Yikes! Yup.

+  return ssl_host_state_delegate_->HasAllowException(host);
+}
+
 void SSLPolicyBackend::AllowCertForHost(const net::X509Certificate& cert,
                                         const std::string& host,
                                         net::CertStatus error) {
   if (ssl_host_state_delegate_)
     ssl_host_state_delegate_->AllowCert(host, cert, error);
 }
 
 SSLHostStateDelegate::CertJudgment SSLPolicyBackend::QueryPolicy(
     const net::X509Certificate& cert,
     const std::string& host,
     net::CertStatus error,
     bool* expired_previous_decision) {
   return ssl_host_state_delegate_ ?
       ssl_host_state_delegate_->QueryPolicy(
           host, cert, error, expired_previous_decision) :
       SSLHostStateDelegate::DENIED;
 }
 
 }  // namespace content