net: don't set HSTS for chart.apis.google.com

net/base/transport_security_state.cc

Index: net/base/transport_security_state.cc
diff --git a/net/base/transport_security_state.cc b/net/base/transport_security_state.cc
index 2129f4896fac3698aa644fd656330345eea2dc17..d5b94730a1a3562a5a43d366271254a98b515f4e 100644
--- a/net/base/transport_security_state.cc
+++ b/net/base/transport_security_state.cc
@@ -1331,6 +1331,12 @@ static const struct HSTSPreload kPreloadedSTS[] = {
       DOMAIN_GOOGLE_COM },
   {17, true, "\004apis\006google\003com", true, kGooglePins,
       DOMAIN_GOOGLE_COM },
+  // chart.apis.google.com is *not* HSTS because the certificate doesn't match
+  // and there are lots of links out there that still use the name. The correct
+  // hostname for this is chart.googleapis.com.
+  {23, true, "\005chart\004apis\006google\003com", false, kGooglePins,
+      DOMAIN_GOOGLE_COM},
+
   // Other Google-related domains that must use an acceptable certificate
   // iff using SSL.
   {11, true, "\005ytimg\003com", false, kGooglePins,