Skip certificate whitelist checking if download URL already matches whitelist and gets sampled.

chrome/browser/safe_browsing/download_protection_service.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/safe_browsing/download_protection_service.h"
 
 #include <stddef.h>
 
 #include <memory>
 
@@ skipping 787 matching lines @@
         skipped_url_whitelist_ = true;
       } else {
         // TODO(grt): Continue processing without uploading so that
         // ClientDownloadRequest callbacks can be run even for this type of safe
         // download.
         PostFinishTask(SAFE, REASON_WHITELISTED_URL);
         return;
       }
     }
 
-    bool should_sample_for_certificate = ShouldSampleWhitelistedDownload();
-    if (signature_info_.trusted()) {
+    if (!skipped_url_whitelist_ && signature_info_.trusted()) {
       for (int i = 0; i < signature_info_.certificate_chain_size(); ++i) {
         if (CertificateChainIsWhitelisted(
                 signature_info_.certificate_chain(i))) {
           RecordCountOfWhitelistedDownload(SIGNATURE_WHITELIST);
-          if (should_sample_for_certificate) {
+          if (ShouldSampleWhitelistedDownload()) {
             skipped_certificate_whitelist_ = true;
             break;
           } else {
             // TODO(grt): Continue processing without uploading so that
             // ClientDownloadRequest callbacks can be run even for this type of
             // safe download.
             PostFinishTask(SAFE, REASON_TRUSTED_EXECUTABLE);
             return;
           }
         }
@@ skipping 923 matching lines @@
 GURL DownloadProtectionService::GetDownloadRequestUrl() {
   GURL url(kDownloadRequestUrl);
   std::string api_key = google_apis::GetAPIKey();
   if (!api_key.empty())
     url = url.Resolve("?key=" + net::EscapeQueryParamValue(api_key, true));
 
   return url;
 }
 
 }  // namespace safe_browsing