Remember user decisions on invalid certificates behind a flag

content/browser/ssl/ssl_policy_backend.cc

Index: content/browser/ssl/ssl_policy_backend.cc
diff --git a/content/browser/ssl/ssl_policy_backend.cc b/content/browser/ssl/ssl_policy_backend.cc
index 3eb4f467e709d57621f9f7b59853d426c73a8f33..5e7ddbed2ef3ba6a90bbd7f2a38d42c4c0ac24a4 100644
--- a/content/browser/ssl/ssl_policy_backend.cc
+++ b/content/browser/ssl/ssl_policy_backend.cc
@@ -7,6 +7,7 @@
 #include "content/browser/frame_host/navigation_controller_impl.h"
 #include "content/browser/ssl/ssl_host_state.h"
 #include "content/public/browser/browser_context.h"
+#include "url/gurl.h"
 
 namespace content {
 
@@ -27,22 +28,22 @@ bool SSLPolicyBackend::DidHostRunInsecureContent(const std::string& host,
 }
 
 void SSLPolicyBackend::DenyCertForHost(net::X509Certificate* cert,
-                                       const std::string& host,
+                                       const GURL& url,
                                        net::CertStatus error) {
-  ssl_host_state_->DenyCertForHost(cert, host, error);
+  ssl_host_state_->DenyCertForHost(cert, url, error);
 }
 
 void SSLPolicyBackend::AllowCertForHost(net::X509Certificate* cert,
-                                        const std::string& host,
+                                        const GURL& url,
                                         net::CertStatus error) {
-  ssl_host_state_->AllowCertForHost(cert, host, error);
+  ssl_host_state_->AllowCertForHost(cert, url, error);
 }
 
 net::CertPolicy::Judgment SSLPolicyBackend::QueryPolicy(
     net::X509Certificate* cert,
-    const std::string& host,
+    const GURL& url,
     net::CertStatus error) {
-  return ssl_host_state_->QueryPolicy(cert, host, error);
+  return ssl_host_state_->QueryPolicy(cert, url, error);
 }
 
 }  // namespace content