Remember user decisions on invalid certificates behind a flag

content/browser/ssl/ssl_policy_backend.h

Index: content/browser/ssl/ssl_policy_backend.h
diff --git a/content/browser/ssl/ssl_policy_backend.h b/content/browser/ssl/ssl_policy_backend.h
index 06ea23eccca94416ac90e5d1772d83b55f876d6e..4b653f718340bbc737e66b294b3b2b98b59d571e 100644
--- a/content/browser/ssl/ssl_policy_backend.h
+++ b/content/browser/ssl/ssl_policy_backend.h
@@ -13,6 +13,8 @@
 #include "net/cert/cert_status_flags.h"
 #include "net/cert/x509_certificate.h"
 
+class GURL;
+
 namespace content {
 class NavigationControllerImpl;
 class SSLHostState;
@@ -30,18 +32,18 @@ class SSLPolicyBackend {
   // Records that |cert| is not permitted to be used for |host| in the future,
   // for a specific error type.
   void DenyCertForHost(net::X509Certificate* cert,
-                       const std::string& host,
+                       const GURL& url,
                        net::CertStatus error);
 
   // Records that |cert| is permitted to be used for |host| in the future, for
   // a specific error type.
   void AllowCertForHost(net::X509Certificate* cert,
-                        const std::string& host,
+                        const GURL& url,
                         net::CertStatus error);
 
   // Queries whether |cert| is allowed or denied for |host|.
   net::CertPolicy::Judgment QueryPolicy(net::X509Certificate* cert,
-                                        const std::string& host,
+                                        const GURL& url,
                                         net::CertStatus error);
 
  private: