Add separate plumbing for subresources with certificate errors

chrome/browser/ssl/chrome_ssl_host_state_delegate.h

Index: chrome/browser/ssl/chrome_ssl_host_state_delegate.h
diff --git a/chrome/browser/ssl/chrome_ssl_host_state_delegate.h b/chrome/browser/ssl/chrome_ssl_host_state_delegate.h
index 8a01205cdb47cd450cf0f42cfc80a970d9f87eec..51da531a43ff5360376097a046b2af32663b8af1 100644
--- a/chrome/browser/ssl/chrome_ssl_host_state_delegate.h
+++ b/chrome/browser/ssl/chrome_ssl_host_state_delegate.h
@@ -40,6 +40,10 @@ class ChromeSSLHostStateDelegate : public content::SSLHostStateDelegate {
   void HostRanInsecureContent(const std::string& host, int pid) override;
   bool DidHostRunInsecureContent(const std::string& host,
                                  int pid) const override;
+  void HostRanContentWithCertificateErrors(const std::string& host,
+                                           int pid) override;
+  bool DidHostRunContentWithCertificateErrors(const std::string& host,
+                                              int pid) const override;
 
   // Revokes all SSL certificate error allow exceptions made by the user for
   // |host| in the given Profile.
@@ -110,11 +114,15 @@ class ChromeSSLHostStateDelegate : public content::SSLHostStateDelegate {
   // contains insecure content in that renderer process.
   typedef std::pair<std::string, int> BrokenHostEntry;
 
-  // Hosts which have been contaminated with insecure content in the
+  // Hosts which have been contaminated with insecure (HTTP) content in the
   // specified process.  Note that insecure content can travel between
   // same-origin frames in one processs but cannot jump between processes.
   std::set<BrokenHostEntry> ran_insecure_content_hosts_;
 
+  // Hosts which have been contaminated with content loaded with
+  // certificate errors in the specified process.
+  std::set<BrokenHostEntry> ran_content_with_certificate_errors_hosts_;
+
   // This is a GUID to mark this unique session. Whenever a certificate decision
   // expiration is set, the GUID is saved as well so Chrome can tell if it was
   // last set during the current session. This is used by the