Add a whitelist for QUIC hosts.

net/http/http_stream_factory_impl.cc

Index: net/http/http_stream_factory_impl.cc
diff --git a/net/http/http_stream_factory_impl.cc b/net/http/http_stream_factory_impl.cc
index 12d14a2fd7b385018745b1eae01180ba6f49ed7b..4ae083e82480483e4b819d87b3494ff5940b4069 100644
--- a/net/http/http_stream_factory_impl.cc
+++ b/net/http/http_stream_factory_impl.cc
@@ -8,11 +8,13 @@
 
 #include "base/logging.h"
 #include "base/stl_util.h"
+#include "base/strings/string_util.h"
 #include "net/base/net_util.h"
 #include "net/http/http_network_session.h"
 #include "net/http/http_server_properties.h"
 #include "net/http/http_stream_factory_impl_job.h"
 #include "net/http/http_stream_factory_impl_request.h"
+#include "net/http/transport_security_state.h"
 #include "net/log/net_log.h"
 #include "net/quic/quic_server_id.h"
 #include "net/spdy/spdy_http_stream.h"
@@ -285,6 +287,9 @@ AlternativeService HttpStreamFactoryImpl::GetAlternativeServiceFor(
             server_id, request_info.privacy_mode, origin_host))
       return alternative_service;
 
+    if (!IsQuicWhitelistedForHost(destination.host()))
+      continue;
+
     // Cache this entry if we don't have a non-broken Alt-Svc yet.
     if (first_alternative_service.protocol == UNINITIALIZED_ALTERNATE_PROTOCOL)
       first_alternative_service = alternative_service;
@@ -365,4 +370,18 @@ void HttpStreamFactoryImpl::OnPreconnectsComplete(const Job* job) {
   OnPreconnectsCompleteInternal();
 }
 
+bool HttpStreamFactoryImpl::IsQuicWhitelistedForHost(const std::string& host) {
+  if (session_->params().transport_security_state->IsGooglePinnedHost(host)) {
+    return true;
+  }
+
+  for (const std::string& white : session_->params().quic_host_whitelist) {
+    if (host == white)
+      return true;
+  }
+
+  return base::EndsWith(host, ".snapchat.com",

[agl, 2016/01/11 22:53:37]

This doesn't match the bare "snapchat.com" domain, I assume. Is that a problem?

[Ryan Hamilton, 2016/01/11 22:59:18]

I believe they use app.snapchat.com from the correspondence I've seen, but I'll
followup.

+                        base::CompareCase::INSENSITIVE_ASCII);
+}
+
 }  // namespace net