Index: net/url_request/url_request_http_job.cc |
diff --git a/net/url_request/url_request_http_job.cc b/net/url_request/url_request_http_job.cc |
index 2ebdd155ba295ea43605ce904dc5ab9ff2f3e2f7..95bdfc10ed1719257a222706ff0682b88a49fae8 100644 |
--- a/net/url_request/url_request_http_job.cc |
+++ b/net/url_request/url_request_http_job.cc |
@@ -744,7 +744,8 @@ void URLRequestHttpJob::ProcessStrictTransportSecurityHeader() { |
// Only accept HSTS headers on HTTPS connections that have no |
// certificate errors. |
- if (!ssl_info.is_valid() || IsCertStatusError(ssl_info.cert_status) || |
+ if (!ssl_info.is_valid() || (IsCertStatusError(ssl_info.cert_status) && |
+ !IsCertStatusMinorError(ssl_info.cert_status)) || |
davidben
2014/09/29 20:21:32
Is this bit still necessary now that it's not Cert
|
!security_state) |
return; |
@@ -767,7 +768,8 @@ void URLRequestHttpJob::ProcessPublicKeyPinsHeader() { |
// Only accept HPKP headers on HTTPS connections that have no |
// certificate errors. |
- if (!ssl_info.is_valid() || IsCertStatusError(ssl_info.cert_status) || |
+ if (!ssl_info.is_valid() || (IsCertStatusError(ssl_info.cert_status) && |
+ !IsCertStatusMinorError(ssl_info.cert_status)) || |
davidben
2014/09/29 20:21:32
Ditto.
|
!security_state) |
return; |