HSTS: add net-internals UI.

net/base/transport_security_state_unittest.cc

 // Copyright (c) 2009 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/base/transport_security_state.h"
 #include "testing/gtest/include/gtest/gtest.h"
 
 namespace net {
 
 class TransportSecurityStateTest : public testing::Test {
@@ skipping 263 matching lines @@
   domain_state.mode = TransportSecurityState::DomainState::MODE_STRICT;
   domain_state.expiry = expiry;
   state->EnableHost("google.com", domain_state);
 
   state->DeleteSince(expiry);
   EXPECT_TRUE(state->IsEnabledForHost(&domain_state, "google.com"));
   state->DeleteSince(older);
   EXPECT_FALSE(state->IsEnabledForHost(&domain_state, "google.com"));
 }
 
+TEST_F(TransportSecurityStateTest, DeleteHost) {
+  scoped_refptr<TransportSecurityState> state(
+      new TransportSecurityState);
+
+  TransportSecurityState::DomainState domain_state;
+  const base::Time current_time(base::Time::Now());
+  const base::Time expiry = current_time + base::TimeDelta::FromSeconds(1000);
+  domain_state.mode = TransportSecurityState::DomainState::MODE_STRICT;
+  domain_state.expiry = expiry;
+  state->EnableHost("google.com", domain_state);
+
+  EXPECT_TRUE(state->IsEnabledForHost(&domain_state, "google.com"));
+  EXPECT_FALSE(state->IsEnabledForHost(&domain_state, "example.com"));
+  EXPECT_TRUE(state->DeleteHost("google.com"));
+  EXPECT_FALSE(state->IsEnabledForHost(&domain_state, "google.com"));
+}
+
 TEST_F(TransportSecurityStateTest, SerialiseOld) {
   scoped_refptr<TransportSecurityState> state(
       new TransportSecurityState);
   // This is an old-style piece of transport state JSON, which has no creation
   // date.
   std::string output =
       "{ "
         "\"NiyD+3J1r6z1wjl2n1ALBu94Zj9OsEAMo0kCN8js0Uk=\": {"
           "\"expiry\": 1266815027.983453, "
           "\"include_subdomains\": false, "
@@ skipping 30 matching lines @@
 }
 
 TEST_F(TransportSecurityStateTest, Preloaded) {
   scoped_refptr<TransportSecurityState> state(
       new TransportSecurityState);
   TransportSecurityState::DomainState domain_state;
   EXPECT_FALSE(state->IsEnabledForHost(&domain_state, "paypal.com"));
   EXPECT_TRUE(state->IsEnabledForHost(&domain_state, "www.paypal.com"));
   EXPECT_EQ(domain_state.mode,
             TransportSecurityState::DomainState::MODE_STRICT);
+  EXPECT_TRUE(domain_state.preloaded);
   EXPECT_FALSE(domain_state.include_subdomains);
   EXPECT_FALSE(state->IsEnabledForHost(&domain_state, "www2.paypal.com"));
   EXPECT_FALSE(state->IsEnabledForHost(&domain_state, "a.www.paypal.com"));
 
   EXPECT_FALSE(state->IsEnabledForHost(&domain_state, "elanex.biz"));
   EXPECT_TRUE(state->IsEnabledForHost(&domain_state, "www.elanex.biz"));
   EXPECT_EQ(domain_state.mode,
             TransportSecurityState::DomainState::MODE_STRICT);
   EXPECT_FALSE(state->IsEnabledForHost(&domain_state, "foo.elanex.biz"));
   EXPECT_FALSE(state->IsEnabledForHost(&domain_state, "a.foo.elanex.biz"));
@@ skipping 19 matching lines @@
 
   EXPECT_TRUE(state->IsEnabledForHost(&domain_state, "members.mayfirst.org"));
   EXPECT_TRUE(state->IsEnabledForHost(&domain_state, "support.mayfirst.org"));
   EXPECT_TRUE(state->IsEnabledForHost(&domain_state, "id.mayfirst.org"));
   EXPECT_TRUE(state->IsEnabledForHost(&domain_state, "lists.mayfirst.org"));
   EXPECT_FALSE(state->IsEnabledForHost(&domain_state, "www.mayfirst.org"));
 
   EXPECT_TRUE(state->IsEnabledForHost(&domain_state, "splendidbacon.com"));
   EXPECT_TRUE(state->IsEnabledForHost(&domain_state, "www.splendidbacon.com"));
   EXPECT_TRUE(state->IsEnabledForHost(&domain_state, "foo.splendidbacon.com"));
+
+  EXPECT_TRUE(state->IsEnabledForHost(&domain_state, "chrome.google.com"));

[agl, 2011/02/11 21:10:17]

These are unrelated to this change, but should have been added earlier.

+  EXPECT_TRUE(state->IsEnabledForHost(&domain_state, "checkout.google.com"));
+  EXPECT_TRUE(state->IsEnabledForHost(&domain_state, "health.google.com"));
 }
 
 TEST_F(TransportSecurityStateTest, LongNames) {
   scoped_refptr<TransportSecurityState> state(
       new TransportSecurityState);
   const char kLongName[] =
       "lookupByWaveIdHashAndWaveIdIdAndWaveIdDomainAndWaveletIdIdAnd"
       "WaveletIdDomainAndBlipBlipid";
   TransportSecurityState::DomainState domain_state;
   // Just checks that we don't hit a NOTREACHED.
   EXPECT_FALSE(state->IsEnabledForHost(&domain_state, kLongName));
 }
 
 }  // namespace net