Introduce the ability to require CT for specific hosts

ios/web/navigation/crw_session_certificate_policy_manager.mm

 // Copyright 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #import "ios/web/navigation/crw_session_certificate_policy_manager.h"
 
 #include <map>
 #include <set>
 
 #include "base/bind.h"
 #include "base/location.h"
 #include "base/logging.h"
 #include "base/strings/sys_string_conversions.h"
 #include "ios/web/public/certificate_policy_cache.h"
 #include "ios/web/public/web_thread.h"
 #include "net/cert/x509_certificate.h"
 
 // Break if we detect that CertStatus values changed, because we persist them on
 // disk and thus require them to be consistent.
-static_assert(net::CERT_STATUS_ALL_ERRORS == 0xFFFF,
+static_assert(net::CERT_STATUS_ALL_ERRORS == 0xFF00FFFF,
               "The value of CERT_STATUS_ALL_ERRORS changed!");
 static_assert(net::CERT_STATUS_COMMON_NAME_INVALID == 1 << 0,
               "The value of CERT_STATUS_COMMON_NAME_INVALID changed!");
 static_assert(net::CERT_STATUS_DATE_INVALID == 1 << 1,
               "The value of CERT_STATUS_DATE_INVALID changed!");
 static_assert(net::CERT_STATUS_AUTHORITY_INVALID == 1 << 2,
               "The value of CERT_STATUS_AUTHORITY_INVALID changed!");
 static_assert(net::CERT_STATUS_NO_REVOCATION_MECHANISM == 1 << 4,
               "The value of CERT_STATUS_NO_REVOCATION_MECHANISM changed!");
 static_assert(net::CERT_STATUS_UNABLE_TO_CHECK_REVOCATION == 1 << 5,
@@ skipping 144 matching lines @@
 }
 
 - (id)copyWithZone:(NSZone*)zone {
   DCHECK([NSThread isMainThread]);
   CRWSessionCertificatePolicyManager* copy = [[[self class] alloc] init];
   copy->allowed_ = allowed_;
   return copy;
 }
 
 @end