Add a build flag to configure bundling of HSTS preload list

net/tools/transport_security_state_generator/pinsets.h

Index: net/tools/transport_security_state_generator/pinsets.h
diff --git a/net/tools/transport_security_state_generator/pinsets.h b/net/tools/transport_security_state_generator/pinsets.h
index 76790307db4e2660901ba86c0d494b412ee432a3..1eec3e30711531bda6a131a9b3b88d8749c4ecf3 100644
--- a/net/tools/transport_security_state_generator/pinsets.h
+++ b/net/tools/transport_security_state_generator/pinsets.h
@@ -7,6 +7,7 @@
 
 #include <map>
 #include <memory>
+#include <set>
 #include <string>
 
 #include "base/macros.h"
@@ -32,6 +33,10 @@ class Pinsets {
   void RegisterSPKIHash(base::StringPiece name, const SPKIHash& hash);
   void RegisterPinset(std::unique_ptr<Pinset> set);
 
+  // Removes all Pinsets whose name is not in |except_these|. Also removes the
+  // SPKI Hashes that are no longer referenced by the remaining pinsets.
+  void FilterPinsets(const std::set<std::string>& except_these);

[Ryan Sleevi, 2017/06/29 20:47:40]

This API seems pretty heavy weight - both from performance, and from a 'hard to
use'.

From looking at the overall CL, it seems like it's just meant to ensure the
generator can generate a file, but is that something we can fix with the .gn, so
that we don't have to introduce this API at all?

[xunjieli, 2017/06/30 19:12:18]

Done.

+
   size_t size() const { return pinsets_.size(); }
   size_t spki_size() const { return spki_hashes_.size(); }