| Index: chrome/browser/ssl/ssl_error_classification.h
|
| diff --git a/chrome/browser/ssl/ssl_error_classification.h b/chrome/browser/ssl/ssl_error_classification.h
|
| index 89869b9ad6dc0f9804841523e57874b81aec24da..7d377dc6bee303a44e735be0a946465474585d01 100644
|
| --- a/chrome/browser/ssl/ssl_error_classification.h
|
| +++ b/chrome/browser/ssl/ssl_error_classification.h
|
| @@ -50,6 +50,19 @@ class SSLErrorClassification : public content::NotificationObserver {
|
| // 3.|hostname| is a dotless domain.
|
| static bool IsHostnameNonUniqueOrDotless(const std::string& hostname);
|
|
|
| + // Returns true if the site's hostname differs from one of the DNS
|
| + // names in the certificate (CN or SANs) only by the presence or
|
| + // absence of the single-label prefix "www". E.g.: (The first domain
|
| + // is hostname and the second domain is a DNS name in the certificate)
|
| + //
|
| + // www.example.com ~ example.com -> true
|
| + // example.com ~ www.example.com -> true
|
| + // www.food.example.com ~ example.com -> false
|
| + // mail.example.com ~ example.com -> false
|
| + static bool GetWWWSubDomainMatch(const std::string& host_name,
|
| + const std::vector<std::string>& dns_names,
|
| + std::string* www_match_host_name);
|
| +
|
| // A function which calculates the severity score when the ssl error is
|
| // |CERT_DATE_INVALID|. The calculated score is between 0.0 and 1.0, higher
|
| // being more severe, indicating how severe the certificate's
|
| @@ -83,14 +96,7 @@ class SSLErrorClassification : public content::NotificationObserver {
|
| // Returns true if the hostname has a known Top Level Domain.
|
| static bool IsHostNameKnownTLD(const std::string& host_name);
|
|
|
| - // Returns true if the site's hostname differs from one of the DNS
|
| - // names in the certificate (CN or SANs) only by the presence or
|
| - // absence of the single-label prefix "www". E.g.:
|
| - //
|
| - // www.example.com ~ example.com -> true
|
| - // example.com ~ www.example.com -> true
|
| - // www.food.example.com ~ example.com -> false
|
| - // mail.example.com ~ example.com -> false
|
| + // Returns true if GetWWWSubDomainMatch finds a www mismatch.
|
| bool IsWWWSubDomainMatch() const;
|
|
|
| // Returns true if |child| is a subdomain of any of the |potential_parents|.
|
|
|