ChromeOS specific HSTS section (with permission from Sumit, Will, more).

net/base/transport_security_state.cc

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/base/transport_security_state.h"
 
 #include "base/base64.h"
 #include "base/json/json_reader.h"
 #include "base/json/json_writer.h"
 #include "base/logging.h"
@@ skipping 507 matching lines @@
     {22, false, "\011appengine\006google\003com"},
     {25, false, "\003www\017paycheckrecords\003com"},
     {20, true, "\006market\007android\003com"},
     {14, false, "\010lastpass\003com"},
     {18, false, "\003www\010lastpass\003com"},
     {14, true, "\010keyerror\003com"},
     {22, true, "\011encrypted\006google\003com"},
     {13, false, "\010entropia\002de"},
     {17, false, "\003www\010entropia\002de"},
     {21, true, "\010accounts\006google\003com"},
+#if defined(OS_CHROMEOS)
+    {17, true, "\004mail\006google\003com"},
+    {13, false, "\007twitter\003com"},
+    {17, false, "\003www\007twitter\003com"},
+    {17, false, "\003api\007twitter\003com"},
+    {17, false, "\003dev\007twitter\003com"},
+    {22, false, "\010business\007twitter\003com"},
+#endif
   };
   static const size_t kNumPreloadedSTS = ARRAYSIZE_UNSAFE(kPreloadedSTS);
 
   static const struct {
     uint8 length;
     bool include_subdomains;
     char dns_name[30];
   } kPreloadedSNISTS[] = {
     {11, true, "\005gmail\003com"},
     {16, true, "\012googlemail\003com"},
@@ skipping 69 matching lines @@
 
 
   LOG(ERROR) << "Rejecting public key chain for domain " << domain
              << ". Validated chain: " << HashesToBase64String(hashes)
              << ", expected: " << HashesToBase64String(public_key_hashes);
 
   return false;
 }
 
 }  // namespace