| Index: content/browser/renderer_host/pepper/pepper_message_filter.h | 
| diff --git a/content/browser/renderer_host/pepper/pepper_message_filter.h b/content/browser/renderer_host/pepper/pepper_message_filter.h | 
| index cb8f0e03edd60c7ecfa259dc9fa372295510fb79..a745768fd51607139a0537342d298bc7c98e8cd1 100644 | 
| --- a/content/browser/renderer_host/pepper/pepper_message_filter.h | 
| +++ b/content/browser/renderer_host/pepper/pepper_message_filter.h | 
| @@ -20,6 +20,7 @@ | 
| #include "content/public/common/process_type.h" | 
| #include "net/base/net_util.h" | 
| #include "net/base/network_change_notifier.h" | 
| +#include "net/http/transport_security_state.h" | 
| #include "net/socket/stream_socket.h" | 
| #include "net/ssl/ssl_config_service.h" | 
| #include "ppapi/c/pp_resource.h" | 
| @@ -88,6 +89,7 @@ class PepperMessageFilter | 
| net::HostResolver* GetHostResolver(); | 
|  | 
| net::CertVerifier* GetCertVerifier(); | 
| +  net::TransportSecurityState* GetTransportSecurityState(); | 
|  | 
| // Adds already accepted socket to the internal TCP sockets table. Takes | 
| // ownership over |socket|. In the case of failure (full socket table) | 
| @@ -217,6 +219,9 @@ class PepperMessageFilter | 
| net::SSLConfig ssl_config_; | 
| // This is lazily created. Users should use GetCertVerifier to retrieve it. | 
| scoped_ptr<net::CertVerifier> cert_verifier_; | 
| +  // This is lazily created. Users should use GetTransportSecurityState to | 
| +  // retrieve it. | 
| +  scoped_ptr<net::TransportSecurityState> transport_security_state_; | 
|  | 
| uint32 next_socket_id_; | 
|  | 
|  |