net: don't pin crypto.cat's subdomains.

net/base/transport_security_state_unittest.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/base/transport_security_state.h"
 
 #include <algorithm>
 #include <string>
 #include <vector>
 
@@ skipping 427 matching lines @@
   EXPECT_TRUE(ShouldRedirect("developer.mydigipass.com"));
   EXPECT_FALSE(ShouldRedirect("foo.developer.mydigipass.com"));
   EXPECT_TRUE(ShouldRedirect("www.developer.mydigipass.com"));
   EXPECT_FALSE(ShouldRedirect("foo.www.developer.mydigipass.com"));
   EXPECT_TRUE(ShouldRedirect("sandbox.mydigipass.com"));
   EXPECT_FALSE(ShouldRedirect("foo.sandbox.mydigipass.com"));
   EXPECT_TRUE(ShouldRedirect("www.sandbox.mydigipass.com"));
   EXPECT_FALSE(ShouldRedirect("foo.www.sandbox.mydigipass.com"));
 
   EXPECT_TRUE(ShouldRedirect("crypto.cat"));
-  EXPECT_TRUE(ShouldRedirect("foo.crypto.cat"));
+  EXPECT_FALSE(ShouldRedirect("foo.crypto.cat"));
 
   EXPECT_TRUE(ShouldRedirect("bigshinylock.minazo.net"));
   EXPECT_TRUE(ShouldRedirect("foo.bigshinylock.minazo.net"));
 
   EXPECT_TRUE(ShouldRedirect("crate.io"));
   EXPECT_TRUE(ShouldRedirect("foo.crate.io"));
 
   EXPECT_TRUE(HasPins("www.twitter.com"));
 }
 
@@ skipping 368 matching lines @@
   // Expect to fail for SNI hosts when not searching the SNI list:
   EXPECT_FALSE(TransportSecurityState::IsGooglePinnedProperty(
       "gmail.com", false));
   EXPECT_FALSE(TransportSecurityState::IsGooglePinnedProperty(
       "googlegroups.com", false));
   EXPECT_FALSE(TransportSecurityState::IsGooglePinnedProperty(
       "www.googlegroups.com", false));
 }
 
 }  // namespace net