Reject renegotiations in SSLClientSocket by default.

net/ssl/ssl_config.h

Index: net/ssl/ssl_config.h
diff --git a/net/ssl/ssl_config.h b/net/ssl/ssl_config.h
index 1b623a14dcd9e3b29541eb91a28ba86352887898..0a195b0a20639ffc1bc1909dfdeab6b22848da72 100644
--- a/net/ssl/ssl_config.h
+++ b/net/ssl/ssl_config.h
@@ -161,6 +161,13 @@ struct NET_EXPORT SSLConfig {
   // requested by the client.
   NextProtoVector next_protos;
 
+  // True if renegotiation should be allowed for the default application-level
+  // protocol when the peer negotiates neither ALPN nor NPN.
+  bool renego_allowed_default;
+
+  // The list of application-level protocols to enable renegotiation for.
+  NextProtoVector renego_allowed_for_protos;
+
   scoped_refptr<X509Certificate> client_cert;
 
   // Information about how to proceed with fastradio padding.