Remember user decisions on invalid certificates behind a flag

content/public/browser/browser_context.h

Index: content/public/browser/browser_context.h
diff --git a/content/public/browser/browser_context.h b/content/public/browser/browser_context.h
index 1c09777f42b2bd6690fa39a40dbd56b033b79911..1cb1c7845c8690012aa55478f703613b90925c13 100644
--- a/content/public/browser/browser_context.h
+++ b/content/public/browser/browser_context.h
@@ -40,6 +40,7 @@ class PushMessagingService;
 class ResourceContext;
 class SiteInstance;
 class StoragePartition;
+class SSLHostStateDecisions;
 
 // This class holds the context needed for a browsing session.
 // It lives on the UI thread. All these methods must only be called on the UI
@@ -149,6 +150,10 @@ class CONTENT_EXPORT BrowserContext : public base::SupportsUserData {
   // responsible for ensuring that it outlives RenderProcessHost. It's valid to
   // return NULL.
   virtual PushMessagingService* GetPushMessagingService() = 0;
+
+  // Returns the SSL host state decisions for this context. It is not valid to
+  // return NULL, except for testing contexts.
+  virtual SSLHostStateDecisions* GetSSLHostStateDecisions() = 0;
 };
 
 }  // namespace content