Reject some previuosly-escaped chars in hostnames.

net/http/http_security_headers_unittest.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include <stdint.h>
 #include <algorithm>
 
 #include "base/base64.h"
 #include "base/strings/string_piece.h"
 #include "crypto/sha2.h"
@@ skipping 606 matching lines @@
   EXPECT_EQ(expect_report_uri, report_uri);
 
   // Test that the parser allows quoted max-age values.
   EXPECT_TRUE(ParseAsHPKPHeader(
       "max-age='999'; " + backup_pin + "; " + good_pin, chain_hashes, &max_age,
       &include_subdomains, &hashes, &report_uri));
   expect_max_age = base::TimeDelta::FromSeconds(999);
   EXPECT_EQ(expect_max_age, max_age);
   EXPECT_FALSE(include_subdomains);
 
-  // Test that the parser handles escaped values.
-  expect_report_uri = GURL("http://foo.com'a");
-  EXPECT_TRUE(ParseAsHPKPHeader("max-age=999; " + backup_pin + "; " + good_pin +
-                                    "; report-uri='http://foo.com\\'\\a'",
-                                chain_hashes, &max_age, &include_subdomains,
-                                &hashes, &report_uri));
-  expect_max_age = base::TimeDelta::FromSeconds(999);
-  EXPECT_EQ(expect_max_age, max_age);
-  EXPECT_FALSE(include_subdomains);
-  EXPECT_EQ(expect_report_uri, report_uri);
-
   // Test that the parser does not require max-age for Report-Only
   // headers.
   expect_report_uri = GURL("http://foo.com");
   EXPECT_TRUE(ParseHPKPReportOnlyHeader(
       backup_pin + "; " + good_pin + "; report-uri='http://foo.com'",
       &include_subdomains, &hashes, &report_uri));
   EXPECT_EQ(expect_report_uri, report_uri);
 }
 
 TEST_F(HttpSecurityHeadersTest, BogusPinsHeadersSHA256) {
@@ skipping 251 matching lines @@
   // The old pins must still exist.
   EXPECT_TRUE(state.HasPublicKeyPins("example.com"));
   EXPECT_EQ(TransportSecurityState::PKPStatus::OK,
             state.CheckPublicKeyPins(
                 domain_port, is_issued_by_known_root,
                 ssl_info.public_key_hashes, nullptr, nullptr,
                 TransportSecurityState::DISABLE_PIN_REPORTS, &failure_log));
 }
 
 };    // namespace net