Parse HPKP report-uri and persist in TransportSecurityPersister

net/http/transport_security_state.h

Index: net/http/transport_security_state.h
diff --git a/net/http/transport_security_state.h b/net/http/transport_security_state.h
index b441763cb082334c61120bfa7cfb91fba30d59c6..0e9e762bdb4ffbd250aba2ddfd7bf74f39279b2a 100644
--- a/net/http/transport_security_state.h
+++ b/net/http/transport_security_state.h
@@ -130,6 +130,10 @@ class NET_EXPORT TransportSecurityState
     // Updated by |GetDynamicPKPState| and |GetStaticDomainState|.
     std::string domain;
 
+    // Optional; a uri-reference indicating where reports should be
+    // sent when this pin is violated.

[davidben, 2015/07/15 22:21:06]

Nit: Probably better to say

   // A optional uri-reference indicating where reports should be
   // sent when this pin is violated or the empty string when omitted.

Just to be explicit what the optional state is. (Although empty string is pretty
obvious.)

[estark, 2015/07/16 00:07:01]

Done.

+    std::string report_uri;
+
     // Takes a set of SubjectPublicKeyInfo |hashes| and returns true if:
     //   1) |bad_static_spki_hashes| does not intersect |hashes|; AND
     //   2) Both |static_spki_hashes| and |dynamic_spki_hashes| are empty
@@ -268,7 +272,8 @@ class NET_EXPORT TransportSecurityState
   void AddHPKP(const std::string& host,
                const base::Time& expiry,
                bool include_subdomains,
-               const HashValueVector& hashes);
+               const HashValueVector& hashes,
+               const std::string& report_uri);
 
   // Returns true iff we have any static public key pins for the |host| and
   // iff its set of required pins is the set we expect for Google
@@ -325,7 +330,8 @@ class NET_EXPORT TransportSecurityState
                        const base::Time& last_observed,
                        const base::Time& expiry,
                        bool include_subdomains,
-                       const HashValueVector& hashes);
+                       const HashValueVector& hashes,
+                       const std::string& report_uri);
 
   // Enable TransportSecurity for |host|. |state| supercedes any previous
   // state for the |host|, including static entries.