Add --ignore-certificate-errors-spki-list switch and UMA histogram.

net/http/http_network_session.h

Index: net/http/http_network_session.h
diff --git a/net/http/http_network_session.h b/net/http/http_network_session.h
index b0ed8c0c0df4bfef5a84edfca883c64bcb7d581d..d971c9adaa46ce402264c533339e1993b6aa5aa1 100644
--- a/net/http/http_network_session.h
+++ b/net/http/http_network_session.h
@@ -16,6 +16,7 @@
 #include <vector>
 
 #include "base/bind.h"
+#include "base/containers/flat_set.h"
 #include "base/memory/memory_coordinator_client.h"
 #include "base/memory/memory_pressure_monitor.h"
 #include "base/memory/ref_counted.h"
@@ -97,6 +98,8 @@ class NET_EXPORT HttpNetworkSession
     HostMappingRules* host_mapping_rules;
     SocketPerformanceWatcherFactory* socket_performance_watcher_factory;
     bool ignore_certificate_errors;
+    base::flat_set<SHA256HashValue, SHA256HashValueLessThan>
+        ignore_certificate_error_spki_set;
     uint16_t testing_fixed_http_port;
     uint16_t testing_fixed_https_port;
     bool enable_tcp_fast_open_for_ssl;