Add a build flag to configure bundling of HSTS preload list

net/tools/transport_security_state_generator/pinsets.h

 // Copyright (c) 2016 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef NET_TOOLS_TRANSPORT_SECURITY_STATE_GENERATOR_PINSETS_H_
 #define NET_TOOLS_TRANSPORT_SECURITY_STATE_GENERATOR_PINSETS_H_
 
 #include <map>
 #include <memory>
+#include <set>
 #include <string>
 
 #include "base/macros.h"
 #include "base/strings/string_piece.h"
 #include "net/tools/transport_security_state_generator/cert_util.h"
 #include "net/tools/transport_security_state_generator/pinset.h"
 #include "net/tools/transport_security_state_generator/spki_hash.h"
 
 namespace net {
 
 namespace transport_security_state {
 
 // Contains SPKIHashes and their names. The names are used to reference
 // the hashes from Pinset's.
 using SPKIHashMap = std::map<std::string, SPKIHash>;
 using PinsetMap = std::map<std::string, std::unique_ptr<Pinset>>;
 
 class Pinsets {
  public:
   Pinsets();
   ~Pinsets();
 
   void RegisterSPKIHash(base::StringPiece name, const SPKIHash& hash);
   void RegisterPinset(std::unique_ptr<Pinset> set);
 
+  // Removes all Pinsets whose name is not in |except_these|. Also removes the
+  // SPKI Hashes that are no longer referenced by the remaining pinsets.
+  void FilterPinsets(const std::set<std::string>& except_these);

[Ryan Sleevi, 2017/06/29 20:47:40]

This API seems pretty heavy weight - both from performance, and from a 'hard to
use'.

From looking at the overall CL, it seems like it's just meant to ensure the
generator can generate a file, but is that something we can fix with the .gn, so
that we don't have to introduce this API at all?

[xunjieli, 2017/06/30 19:12:18]

Done.

+
   size_t size() const { return pinsets_.size(); }
   size_t spki_size() const { return spki_hashes_.size(); }
 
   const SPKIHashMap& spki_hashes() const { return spki_hashes_; }
   const PinsetMap& pinsets() const { return pinsets_; }
 
  private:
   // Contains all SPKI hashes found in the input pins file.
   SPKIHashMap spki_hashes_;
 
   // Contains all pinsets in the input JSON file.
   PinsetMap pinsets_;
 
   DISALLOW_COPY_AND_ASSIGN(Pinsets);
 };
 
 }  // namespace transport_security_state
 
 }  // namespace net
 
 #endif  // NET_TOOLS_TRANSPORT_SECURITY_STATE_GENERATOR_PINSETS_H_