Block port 443 for all protocols other than HTTPS or WSS.

net/base/net_util.h

Index: net/base/net_util.h
diff --git a/net/base/net_util.h b/net/base/net_util.h
index 9e9dbad4613914bf257bd274edb692c79e947ee3..9802097a4591a4dbf055ea465ee6a7a146e662ed 100644
--- a/net/base/net_util.h
+++ b/net/base/net_util.h
@@ -260,6 +260,15 @@ NET_EXPORT bool IsPortAllowedByDefault(int port);
 // protocol.  Returns true if |port| is allowed, false if it is restricted.
 NET_EXPORT_PRIVATE bool IsPortAllowedByFtp(int port);
 
+// Checks |port| against a list of ports which are restricted by the HTTPS/WSS
+// protocols.  Returns true if |port| is allowed, false if it is restricted.
+NET_EXPORT_PRIVATE bool IsPortAllowedByHttpsOrWss(int port);
+
+// Checks the effective port of the |url| against a list of ports which are
+// restricted by the scheme of the |url|. Returns true if the port is allowed,
+// false if it is restricted.
+NET_EXPORT_PRIVATE bool IsEffectivePortAllowedByScheme(const GURL& url);
+
 // Check if banned |port| has been overriden by an entry in
 // |explicitly_allowed_ports_|.
 NET_EXPORT_PRIVATE bool IsPortAllowedByOverride(int port);