ForceTLS: hash hostnames, handle subdomains, canonicalise.

net/base/strict_transport_security_state_unittest.cc

 // Copyright (c) 2009 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/base/strict_transport_security_state.h"
 #include "testing/gtest/include/gtest/gtest.h"
 
-namespace {
+namespace net {

[abarth-chromium, 2009/09/09 00:54:22]

I think we don't need to put this in the net namespace anymore now that we're
not using a friend test.

 
 class StrictTransportSecurityStateTest : public testing::Test {
 };
 
 TEST_F(StrictTransportSecurityStateTest, BogusHeaders) {
   int max_age = 42;
   bool include_subdomains = false;
 
   EXPECT_FALSE(net::StrictTransportSecurityState::ParseHeader(
       "", &max_age, &include_subdomains));
@@ skipping 92 matching lines @@
       "max-age=394082038    incLudesUbdOmains", &max_age, &include_subdomains));
   EXPECT_EQ(max_age, 394082038);
   EXPECT_TRUE(include_subdomains);
 
   EXPECT_TRUE(net::StrictTransportSecurityState::ParseHeader(
       "  max-age=0    incLudesUbdOmains   ", &max_age, &include_subdomains));
   EXPECT_EQ(max_age, 0);
   EXPECT_TRUE(include_subdomains);
 }
 
-}  // namespace
+TEST_F(StrictTransportSecurityStateTest, SimpleMatches) {
+  scoped_refptr<StrictTransportSecurityState> state(
+      new StrictTransportSecurityState);
+  const base::Time current_time(base::Time::Now());
+  const base::Time expiry = current_time + base::TimeDelta::FromSeconds(1000);
+
+  EXPECT_FALSE(state->IsEnabledForHost("google.com"));
+  state->EnableHost("google.com", expiry, false);
+  EXPECT_TRUE(state->IsEnabledForHost("google.com"));
+}
+
+TEST_F(StrictTransportSecurityStateTest, MatchesCase1) {
+  scoped_refptr<StrictTransportSecurityState> state(
+      new StrictTransportSecurityState);
+  const base::Time current_time(base::Time::Now());
+  const base::Time expiry = current_time + base::TimeDelta::FromSeconds(1000);
+
+  EXPECT_FALSE(state->IsEnabledForHost("google.com"));
+  state->EnableHost("GOOgle.coM", expiry, false);
+  EXPECT_TRUE(state->IsEnabledForHost("google.com"));
+}
+
+TEST_F(StrictTransportSecurityStateTest, MatchesCase2) {
+  scoped_refptr<StrictTransportSecurityState> state(
+      new StrictTransportSecurityState);
+  const base::Time current_time(base::Time::Now());
+  const base::Time expiry = current_time + base::TimeDelta::FromSeconds(1000);
+
+  EXPECT_FALSE(state->IsEnabledForHost("GOOgle.coM"));
+  state->EnableHost("google.com", expiry, false);
+  EXPECT_TRUE(state->IsEnabledForHost("GOOgle.coM"));
+}
+
+TEST_F(StrictTransportSecurityStateTest, SubdomainMatches) {
+  scoped_refptr<StrictTransportSecurityState> state(
+      new StrictTransportSecurityState);
+  const base::Time current_time(base::Time::Now());
+  const base::Time expiry = current_time + base::TimeDelta::FromSeconds(1000);
+
+  EXPECT_FALSE(state->IsEnabledForHost("google.com"));
+  state->EnableHost("google.com", expiry, true);
+  EXPECT_TRUE(state->IsEnabledForHost("google.com"));
+  EXPECT_TRUE(state->IsEnabledForHost("foo.google.com"));
+  EXPECT_TRUE(state->IsEnabledForHost("foo.bar.google.com"));
+  EXPECT_TRUE(state->IsEnabledForHost("foo.bar.baz.google.com"));
+  EXPECT_FALSE(state->IsEnabledForHost("com"));
+}
+
+TEST_F(StrictTransportSecurityStateTest, Serialise1) {
+  scoped_refptr<StrictTransportSecurityState> state(
+      new StrictTransportSecurityState);
+  std::string output;
+  state->Serialise(&output);
+  EXPECT_TRUE(state->Deserialise(output));
+}
+
+TEST_F(StrictTransportSecurityStateTest, Serialise2) {
+  scoped_refptr<StrictTransportSecurityState> state(
+      new StrictTransportSecurityState);
+
+  const base::Time current_time(base::Time::Now());
+  const base::Time expiry = current_time + base::TimeDelta::FromSeconds(1000);
+
+  EXPECT_FALSE(state->IsEnabledForHost("google.com"));
+  state->EnableHost("google.com", expiry, true);
+
+  std::string output;
+  state->Serialise(&output);
+  EXPECT_TRUE(state->Deserialise(output));
+
+  EXPECT_TRUE(state->IsEnabledForHost("google.com"));
+  EXPECT_TRUE(state->IsEnabledForHost("foo.google.com"));
+  EXPECT_TRUE(state->IsEnabledForHost("foo.bar.google.com"));
+  EXPECT_TRUE(state->IsEnabledForHost("foo.bar.baz.google.com"));
+  EXPECT_FALSE(state->IsEnabledForHost("com"));
+}
+
+}  // namespace net