Index: net/http/transport_security_state.h |
diff --git a/net/http/transport_security_state.h b/net/http/transport_security_state.h |
index b441763cb082334c61120bfa7cfb91fba30d59c6..0e9e762bdb4ffbd250aba2ddfd7bf74f39279b2a 100644 |
--- a/net/http/transport_security_state.h |
+++ b/net/http/transport_security_state.h |
@@ -130,6 +130,10 @@ class NET_EXPORT TransportSecurityState |
// Updated by |GetDynamicPKPState| and |GetStaticDomainState|. |
std::string domain; |
+ // Optional; a uri-reference indicating where reports should be |
+ // sent when this pin is violated. |
davidben
2015/07/15 22:21:06
Nit: Probably better to say
// A optional uri-
estark
2015/07/16 00:07:01
Done.
|
+ std::string report_uri; |
+ |
// Takes a set of SubjectPublicKeyInfo |hashes| and returns true if: |
// 1) |bad_static_spki_hashes| does not intersect |hashes|; AND |
// 2) Both |static_spki_hashes| and |dynamic_spki_hashes| are empty |
@@ -268,7 +272,8 @@ class NET_EXPORT TransportSecurityState |
void AddHPKP(const std::string& host, |
const base::Time& expiry, |
bool include_subdomains, |
- const HashValueVector& hashes); |
+ const HashValueVector& hashes, |
+ const std::string& report_uri); |
// Returns true iff we have any static public key pins for the |host| and |
// iff its set of required pins is the set we expect for Google |
@@ -325,7 +330,8 @@ class NET_EXPORT TransportSecurityState |
const base::Time& last_observed, |
const base::Time& expiry, |
bool include_subdomains, |
- const HashValueVector& hashes); |
+ const HashValueVector& hashes, |
+ const std::string& report_uri); |
// Enable TransportSecurity for |host|. |state| supercedes any previous |
// state for the |host|, including static entries. |