Parse HPKP report-uri and persist in TransportSecurityPersister

net/http/transport_security_state.h

Index: net/http/transport_security_state.h
diff --git a/net/http/transport_security_state.h b/net/http/transport_security_state.h
index b441763cb082334c61120bfa7cfb91fba30d59c6..67c7a631d9c62fa593f9c4c95a9c61e46278eda6 100644
--- a/net/http/transport_security_state.h
+++ b/net/http/transport_security_state.h
@@ -17,6 +17,7 @@
 #include "net/base/net_export.h"
 #include "net/cert/x509_cert_types.h"
 #include "net/cert/x509_certificate.h"
+#include "url/gurl.h"
 
 namespace net {
 
@@ -130,6 +131,10 @@ class NET_EXPORT TransportSecurityState
     // Updated by |GetDynamicPKPState| and |GetStaticDomainState|.
     std::string domain;
 
+    // An optional URI indicating where reports should be
+    // sent when this pin is violated, or empty when omitted.

[davidben, 2015/07/16 20:13:01]

Super-nit-picky-nit: I think you want to rewrap this text now that you can fit
more on the first line.

[estark, 2015/07/17 00:56:32]

Done.

+    GURL report_uri;
+
     // Takes a set of SubjectPublicKeyInfo |hashes| and returns true if:
     //   1) |bad_static_spki_hashes| does not intersect |hashes|; AND
     //   2) Both |static_spki_hashes| and |dynamic_spki_hashes| are empty
@@ -268,7 +273,8 @@ class NET_EXPORT TransportSecurityState
   void AddHPKP(const std::string& host,
                const base::Time& expiry,
                bool include_subdomains,
-               const HashValueVector& hashes);
+               const HashValueVector& hashes,
+               const GURL& report_uri);
 
   // Returns true iff we have any static public key pins for the |host| and
   // iff its set of required pins is the set we expect for Google
@@ -325,7 +331,8 @@ class NET_EXPORT TransportSecurityState
                        const base::Time& last_observed,
                        const base::Time& expiry,
                        bool include_subdomains,
-                       const HashValueVector& hashes);
+                       const HashValueVector& hashes,
+                       const GURL& report_uri);
 
   // Enable TransportSecurity for |host|. |state| supercedes any previous
   // state for the |host|, including static entries.