Remember user decisions on invalid certificates behind a flag

content/public/browser/browser_context.h

Index: content/public/browser/browser_context.h
diff --git a/content/public/browser/browser_context.h b/content/public/browser/browser_context.h
index 1c09777f42b2bd6690fa39a40dbd56b033b79911..1e2564fddc7cece66b82cd70cc43f1a81aa3fbbf 100644
--- a/content/public/browser/browser_context.h
+++ b/content/public/browser/browser_context.h
@@ -40,6 +40,7 @@ class PushMessagingService;
 class ResourceContext;
 class SiteInstance;
 class StoragePartition;
+class SSLHostStateDelegate;
 
 // This class holds the context needed for a browsing session.
 // It lives on the UI thread. All these methods must only be called on the UI
@@ -149,6 +150,10 @@ class CONTENT_EXPORT BrowserContext : public base::SupportsUserData {
   // responsible for ensuring that it outlives RenderProcessHost. It's valid to
   // return NULL.
   virtual PushMessagingService* GetPushMessagingService() = 0;
+
+  // Returns the SSL host state decisions for this context. The context may
+  // return NULL, implementing the default exception storage strategy.
+  virtual SSLHostStateDelegate* GetSSLHostStateDelegate() = 0;
 };
 
 }  // namespace content