Process Public-Key-Pin-Report-Only headers

net/http/http_security_headers.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "base/base64.h"
 #include "base/basictypes.h"
 #include "base/strings/string_number_conversions.h"
 #include "base/strings/string_piece.h"
 #include "base/strings/string_tokenizer.h"
 #include "base/strings/string_util.h"
@@ skipping 361 matching lines @@
 
 // "Public-Key-Pins-Report-Only" ":"
 //     [ "max-age" "=" delta-seconds ";" ]
 //     "pin-" algo "=" base64 [ ";" ... ]
 //     [ ";" "includeSubdomains" ]
 //     [ ";" "report-uri" "=" uri-reference ]
 bool ParseHPKPReportOnlyHeader(const std::string& value,
                                bool* include_subdomains,
                                HashValueVector* hashes,
                                GURL* report_uri) {
-  // max-age and includeSubdomains are irrelevant for Report-Only
-  // headers.
+  // max-age is irrelevant for Report-Only headers.
   base::TimeDelta unused_max_age;
 
   return ParseHPKPHeaderImpl(value, DO_NOT_REQUIRE_MAX_AGE, &unused_max_age,
                              include_subdomains, hashes, report_uri);
 }
 
 }  // namespace net