Forget SSL error exceptions when good certs seen for regular requests.

content/public/browser/ssl_host_state_delegate.h

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CONTENT_PUBLIC_BROWSER_SSL_HOST_STATE_DELEGATE_H_
 #define CONTENT_PUBLIC_BROWSER_SSL_HOST_STATE_DELEGATE_H_
 
 #include "base/memory/ref_counted.h"
 #include "base/memory/scoped_ptr.h"
 #include "base/threading/non_thread_safe.h"
@@ skipping 36 matching lines @@
                                    net::CertStatus error,
                                    bool* expired_previous_decision) = 0;
 
   // Records that a host has run insecure content.
   virtual void HostRanInsecureContent(const std::string& host, int pid) = 0;
 
   // Returns whether the specified host ran insecure content.
   virtual bool DidHostRunInsecureContent(const std::string& host,
                                          int pid) const = 0;
 
+  // Revokes all SSL certificate error allow exceptions made by the user for
+  // |host|.
+  virtual void RevokeUserAllowExceptions(const std::string& host) = 0;
+
+  // Returns whether the user has allowed a certificate error exception for
+  // |host|. This does not mean that *all* certificate errors are allowed, just
+  // that there exists an exception. To see if a particular certificate and
+  // error combination exception is allowed, use QueryPolicy().
+  virtual bool HasAllowException(const std::string& host) const = 0;
+
  protected:
   virtual ~SSLHostStateDelegate() {}
 };
 
 }  // namespace content
 
 #endif  // CONTENT_PUBLIC_BROWSER_SSL_HOST_STATE_DELEGATE_H_