| Index: net/http/transport_security_state.cc
|
| diff --git a/net/http/transport_security_state.cc b/net/http/transport_security_state.cc
|
| index 3fb95dde9a30666d7ca20abd212c06be775ed026..1df2f86669991ecbc0dd8bb46af20761cb7103b0 100644
|
| --- a/net/http/transport_security_state.cc
|
| +++ b/net/http/transport_security_state.cc
|
| @@ -545,6 +545,7 @@ struct HSTSPreload {
|
| bool https_required;
|
| PublicKeyPins pins;
|
| SecondLevelDomainName second_level_domain_name;
|
| + SSL_CONNECTION_VERSION ssl_version_min;
|
| };
|
|
|
| static bool HasPreload(const struct HSTSPreload* entries, size_t num_entries,
|
| @@ -558,6 +559,7 @@ static bool HasPreload(const struct HSTSPreload* entries, size_t num_entries,
|
| *ret = false;
|
| } else {
|
| out->include_subdomains = entries[j].include_subdomains;
|
| + out->ssl_version_min = entries[j].ssl_version_min;
|
| *ret = true;
|
| if (!entries[j].https_required)
|
| out->upgrade_mode = TransportSecurityState::DomainState::MODE_DEFAULT;
|
| @@ -789,7 +791,8 @@ void TransportSecurityState::AddOrUpdateForcedHosts(
|
| TransportSecurityState::DomainState::DomainState()
|
| : upgrade_mode(MODE_FORCE_HTTPS),
|
| created(base::Time::Now()),
|
| - include_subdomains(false) {
|
| + include_subdomains(false),
|
| + ssl_version_min(SSL_CONNECTION_VERSION_SSL3) {
|
| }
|
|
|
| TransportSecurityState::DomainState::~DomainState() {
|
|
|