Preload HSTS for paypal.com.

net/http/transport_security_state_unittest.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/http/transport_security_state.h"
 
 #include <algorithm>
 #include <string>
 #include <vector>
 
@@ skipping 133 matching lines @@
 
   EXPECT_TRUE(state.GetDomainState("yahoo.com", true, &domain_state));
   EXPECT_FALSE(state.GetDomainState("example.com", true, &domain_state));
   EXPECT_TRUE(state.DeleteDynamicDataForHost("yahoo.com"));
   EXPECT_FALSE(state.GetDomainState("yahoo.com", true, &domain_state));
 }
 
 TEST_F(TransportSecurityStateTest, IsPreloaded) {
   const std::string paypal = CanonicalizeHost("paypal.com");
   const std::string www_paypal = CanonicalizeHost("www.paypal.com");
+  const std::string foo_paypal = CanonicalizeHost("foo.paypal.com");
   const std::string a_www_paypal = CanonicalizeHost("a.www.paypal.com");
   const std::string abc_paypal = CanonicalizeHost("a.b.c.paypal.com");
   const std::string example = CanonicalizeHost("example.com");
   const std::string aypal = CanonicalizeHost("aypal.com");
 
   TransportSecurityState state;
   TransportSecurityState::DomainState domain_state;
 
-  EXPECT_FALSE(GetStaticDomainState(&state, paypal, true, &domain_state));
+  EXPECT_TRUE(GetStaticDomainState(&state, paypal, true, &domain_state));
   EXPECT_TRUE(GetStaticDomainState(&state, www_paypal, true, &domain_state));
+  EXPECT_FALSE(GetStaticDomainState(&state, foo_paypal, true, &domain_state));
   EXPECT_FALSE(domain_state.include_subdomains);
   EXPECT_FALSE(GetStaticDomainState(&state, a_www_paypal, true, &domain_state));
   EXPECT_FALSE(GetStaticDomainState(&state, abc_paypal, true, &domain_state));
   EXPECT_FALSE(GetStaticDomainState(&state, example, true, &domain_state));
   EXPECT_FALSE(GetStaticDomainState(&state, aypal, true, &domain_state));
 }
 
 TEST_F(TransportSecurityStateTest, PreloadedDomainSet) {
   TransportSecurityState state;
   TransportSecurityState::DomainState domain_state;
@@ skipping 48 matching lines @@
 TEST_F(TransportSecurityStateTest, Preloaded) {
   TransportSecurityState state;
   TransportSecurityState::DomainState domain_state;
 
   // We do more extensive checks for the first domain.
   EXPECT_TRUE(state.GetDomainState("www.paypal.com", true, &domain_state));
   EXPECT_EQ(domain_state.upgrade_mode,
             TransportSecurityState::DomainState::MODE_FORCE_HTTPS);
   EXPECT_FALSE(domain_state.include_subdomains);
 
-  EXPECT_FALSE(HasState("paypal.com"));
+  EXPECT_TRUE(HasState("paypal.com"));
   EXPECT_FALSE(HasState("www2.paypal.com"));
   EXPECT_FALSE(HasState("www2.paypal.com"));
 
   // Google hosts:
 
   EXPECT_TRUE(ShouldRedirect("chrome.google.com"));
   EXPECT_TRUE(ShouldRedirect("checkout.google.com"));
   EXPECT_TRUE(ShouldRedirect("health.google.com"));
   EXPECT_TRUE(ShouldRedirect("docs.google.com"));
   EXPECT_TRUE(ShouldRedirect("sites.google.com"));
@@ skipping 587 matching lines @@
   // Expect to fail for SNI hosts when not searching the SNI list:
   EXPECT_FALSE(TransportSecurityState::IsGooglePinnedProperty(
       "gmail.com", false));
   EXPECT_FALSE(TransportSecurityState::IsGooglePinnedProperty(
       "googlegroups.com", false));
   EXPECT_FALSE(TransportSecurityState::IsGooglePinnedProperty(
       "www.googlegroups.com", false));
 }
 
 }  // namespace net