Clang format slam.

net/http/transport_security_state_unittest.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/http/transport_security_state.h"
 
 #include <algorithm>
 #include <string>
 #include <vector>
 
@@ skipping 94 matching lines @@
   TransportSecurityState::DomainState domain_state;
   const base::Time current_time(base::Time::Now());
   const base::Time expiry = current_time + base::TimeDelta::FromSeconds(1000);
 
   EXPECT_FALSE(state.GetDomainState("yahoo.com", true, &domain_state));
   bool include_subdomains = true;
   state.AddHSTS("yahoo.com", expiry, include_subdomains);
   EXPECT_TRUE(state.GetDomainState("yahoo.com", true, &domain_state));
   EXPECT_TRUE(state.GetDomainState("foo.yahoo.com", true, &domain_state));
   EXPECT_TRUE(state.GetDomainState("foo.bar.yahoo.com", true, &domain_state));
-  EXPECT_TRUE(state.GetDomainState("foo.bar.baz.yahoo.com", true,
-                                   &domain_state));
+  EXPECT_TRUE(
+      state.GetDomainState("foo.bar.baz.yahoo.com", true, &domain_state));
   EXPECT_FALSE(state.GetDomainState("com", true, &domain_state));
 }
 
 TEST_F(TransportSecurityStateTest, InvalidDomains) {
   TransportSecurityState state;
   TransportSecurityState::DomainState domain_state;
   const base::Time current_time(base::Time::Now());
   const base::Time expiry = current_time + base::TimeDelta::FromSeconds(1000);
 
   EXPECT_FALSE(state.GetDomainState("yahoo.com", true, &domain_state));
@@ skipping 57 matching lines @@
 }
 
 TEST_F(TransportSecurityStateTest, PreloadedDomainSet) {
   TransportSecurityState state;
   TransportSecurityState::DomainState domain_state;
 
   // The domain wasn't being set, leading to a blank string in the
   // chrome://net-internals/#hsts UI. So test that.
   EXPECT_TRUE(state.GetDomainState("market.android.com", true, &domain_state));
   EXPECT_EQ(domain_state.domain, "market.android.com");
-  EXPECT_TRUE(state.GetDomainState("sub.market.android.com", true,
-                                   &domain_state));
+  EXPECT_TRUE(
+      state.GetDomainState("sub.market.android.com", true, &domain_state));
   EXPECT_EQ(domain_state.domain, "market.android.com");
 }
 
 static bool ShouldRedirect(const char* hostname) {
   TransportSecurityState state;
   TransportSecurityState::DomainState domain_state;
   return state.GetDomainState(hostname, true /* SNI ok */, &domain_state) &&
          domain_state.ShouldUpgradeToSSL();
 }
 
 static bool HasState(const char* hostname) {
   TransportSecurityState state;
   TransportSecurityState::DomainState domain_state;
   return state.GetDomainState(hostname, true /* SNI ok */, &domain_state);
 }
 
 static bool HasPublicKeyPins(const char* hostname, bool sni_enabled) {
   TransportSecurityState state;
   TransportSecurityState::DomainState domain_state;
   if (!state.GetDomainState(hostname, sni_enabled, &domain_state))
     return false;
 
   return domain_state.HasPublicKeyPins();
 }
 
 static bool HasPublicKeyPins(const char* hostname) {
   return HasPublicKeyPins(hostname, true);
 }
 
-static bool OnlyPinning(const char *hostname) {
+static bool OnlyPinning(const char* hostname) {
   TransportSecurityState state;
   TransportSecurityState::DomainState domain_state;
   if (!state.GetDomainState(hostname, true /* SNI ok */, &domain_state))
     return false;
 
   return (domain_state.static_spki_hashes.size() > 0 ||
           domain_state.bad_static_spki_hashes.size() > 0 ||
           domain_state.dynamic_spki_hashes.size() > 0) &&
          !domain_state.ShouldUpgradeToSSL();
 }
@@ skipping 62 matching lines @@
   EXPECT_TRUE(OnlyPinning("appspot.com"));
   EXPECT_TRUE(OnlyPinning("googlesyndication.com"));
   EXPECT_TRUE(OnlyPinning("doubleclick.net"));
   EXPECT_TRUE(OnlyPinning("googlegroups.com"));
 
   // Tests for domains that don't work without SNI.
   EXPECT_FALSE(state.GetDomainState("gmail.com", false, &domain_state));
   EXPECT_FALSE(state.GetDomainState("www.gmail.com", false, &domain_state));
   EXPECT_FALSE(state.GetDomainState("m.gmail.com", false, &domain_state));
   EXPECT_FALSE(state.GetDomainState("googlemail.com", false, &domain_state));
-  EXPECT_FALSE(state.GetDomainState("www.googlemail.com", false,
-                                    &domain_state));
+  EXPECT_FALSE(
+      state.GetDomainState("www.googlemail.com", false, &domain_state));
   EXPECT_FALSE(state.GetDomainState("m.googlemail.com", false, &domain_state));
 
   // Other hosts:
 
   EXPECT_TRUE(ShouldRedirect("aladdinschools.appspot.com"));
 
   EXPECT_TRUE(ShouldRedirect("ottospora.nl"));
   EXPECT_TRUE(ShouldRedirect("www.ottospora.nl"));
 
   EXPECT_TRUE(ShouldRedirect("www.paycheckrecords.com"));
@@ skipping 76 matching lines @@
 
   EXPECT_TRUE(ShouldRedirect("linx.net"));
   EXPECT_TRUE(ShouldRedirect("foo.linx.net"));
 
   EXPECT_TRUE(ShouldRedirect("dropcam.com"));
   EXPECT_TRUE(ShouldRedirect("www.dropcam.com"));
   EXPECT_FALSE(HasState("foo.dropcam.com"));
 
   EXPECT_TRUE(state.GetDomainState("torproject.org", false, &domain_state));
   EXPECT_FALSE(domain_state.static_spki_hashes.empty());
-  EXPECT_TRUE(state.GetDomainState("www.torproject.org", false,
-                                   &domain_state));
+  EXPECT_TRUE(state.GetDomainState("www.torproject.org", false, &domain_state));
   EXPECT_FALSE(domain_state.static_spki_hashes.empty());
-  EXPECT_TRUE(state.GetDomainState("check.torproject.org", false,
-                                   &domain_state));
+  EXPECT_TRUE(
+      state.GetDomainState("check.torproject.org", false, &domain_state));
   EXPECT_FALSE(domain_state.static_spki_hashes.empty());
-  EXPECT_TRUE(state.GetDomainState("blog.torproject.org", false,
-                                   &domain_state));
+  EXPECT_TRUE(
+      state.GetDomainState("blog.torproject.org", false, &domain_state));
   EXPECT_FALSE(domain_state.static_spki_hashes.empty());
   EXPECT_TRUE(ShouldRedirect("ebanking.indovinabank.com.vn"));
   EXPECT_TRUE(ShouldRedirect("foo.ebanking.indovinabank.com.vn"));
 
   EXPECT_TRUE(ShouldRedirect("epoxate.com"));
   EXPECT_FALSE(HasState("foo.epoxate.com"));
 
   EXPECT_TRUE(HasPublicKeyPins("torproject.org"));
   EXPECT_TRUE(HasPublicKeyPins("www.torproject.org"));
   EXPECT_TRUE(HasPublicKeyPins("check.torproject.org"));
@@ skipping 107 matching lines @@
   EXPECT_TRUE(HasPublicKeyPins("www.twitter.com"));
   EXPECT_TRUE(HasPublicKeyPins("api.twitter.com"));
   EXPECT_TRUE(HasPublicKeyPins("oauth.twitter.com"));
   EXPECT_TRUE(HasPublicKeyPins("mobile.twitter.com"));
   EXPECT_TRUE(HasPublicKeyPins("dev.twitter.com"));
   EXPECT_TRUE(HasPublicKeyPins("business.twitter.com"));
   EXPECT_TRUE(HasPublicKeyPins("platform.twitter.com"));
   EXPECT_TRUE(HasPublicKeyPins("si0.twimg.com"));
 }
 
-static bool AddHash(const std::string& type_and_base64,
-                    HashValueVector* out) {
+static bool AddHash(const std::string& type_and_base64, HashValueVector* out) {
   HashValue hash;
   if (!hash.FromString(type_and_base64))
     return false;
 
   out->push_back(hash);
   return true;
 }
 
 TEST_F(TransportSecurityStateTest, PinValidationWithoutRejectedCerts) {
   // kGoodPath is blog.torproject.org.
   static const char* kGoodPath[] = {
-    "sha1/m9lHYJYke9k0GtVZ+bXSQYE8nDI=",
-    "sha1/o5OZxATDsgmwgcIfIWIneMJ0jkw=",
-    "sha1/wHqYaI2J+6sFZAwRfap9ZbjKzE4=",
-    NULL,
+      "sha1/m9lHYJYke9k0GtVZ+bXSQYE8nDI=", "sha1/o5OZxATDsgmwgcIfIWIneMJ0jkw=",
+      "sha1/wHqYaI2J+6sFZAwRfap9ZbjKzE4=", NULL,
   };
 
   // kBadPath is plus.google.com via Trustcenter, which is utterly wrong for
   // torproject.org.
   static const char* kBadPath[] = {
-    "sha1/4BjDjn8v2lWeUFQnqSs0BgbIcrU=",
-    "sha1/gzuEEAB/bkqdQS3EIjk2by7lW+k=",
-    "sha1/SOZo+SvSspXXR9gjIBBPM5iQn9Q=",
-    NULL,
+      "sha1/4BjDjn8v2lWeUFQnqSs0BgbIcrU=", "sha1/gzuEEAB/bkqdQS3EIjk2by7lW+k=",
+      "sha1/SOZo+SvSspXXR9gjIBBPM5iQn9Q=", NULL,
   };
 
   HashValueVector good_hashes, bad_hashes;
 
   for (size_t i = 0; kGoodPath[i]; i++) {
     EXPECT_TRUE(AddHash(kGoodPath[i], &good_hashes));
   }
   for (size_t i = 0; kBadPath[i]; i++) {
     EXPECT_TRUE(AddHash(kBadPath[i], &bad_hashes));
   }
@@ skipping 45 matching lines @@
   TransportSecurityState::DomainState domain_state;
   const base::Time current_time(base::Time::Now());
   const base::Time expiry = current_time + base::TimeDelta::FromSeconds(1000);
   domain_state.upgrade_expiry = expiry;
   EnableHost(&state, "www.google.com", domain_state);
 
   EXPECT_TRUE(state.GetDomainState("www.google.com", true, &domain_state));
 }
 
 TEST_F(TransportSecurityStateTest, GooglePinnedProperties) {
-  EXPECT_FALSE(TransportSecurityState::IsGooglePinnedProperty(
-      "www.example.com", true));
-  EXPECT_FALSE(TransportSecurityState::IsGooglePinnedProperty(
-      "www.paypal.com", true));
-  EXPECT_FALSE(TransportSecurityState::IsGooglePinnedProperty(
-      "mail.twitter.com", true));
+  EXPECT_FALSE(
+      TransportSecurityState::IsGooglePinnedProperty("www.example.com", true));
+  EXPECT_FALSE(
+      TransportSecurityState::IsGooglePinnedProperty("www.paypal.com", true));
+  EXPECT_FALSE(
+      TransportSecurityState::IsGooglePinnedProperty("mail.twitter.com", true));
   EXPECT_FALSE(TransportSecurityState::IsGooglePinnedProperty(
       "www.google.com.int", true));
-  EXPECT_FALSE(TransportSecurityState::IsGooglePinnedProperty(
-      "jottit.com", true));
+  EXPECT_FALSE(
+      TransportSecurityState::IsGooglePinnedProperty("jottit.com", true));
   // learn.doubleclick.net has a more specific match than
   // *.doubleclick.com, and has 0 or NULL for its required certs.
   // This test ensures that the exact-match-preferred behavior
   // works.
   EXPECT_FALSE(TransportSecurityState::IsGooglePinnedProperty(
       "learn.doubleclick.net", true));
 
   EXPECT_TRUE(TransportSecurityState::IsGooglePinnedProperty(
       "encrypted.google.com", true));
-  EXPECT_TRUE(TransportSecurityState::IsGooglePinnedProperty(
-      "mail.google.com", true));
+  EXPECT_TRUE(
+      TransportSecurityState::IsGooglePinnedProperty("mail.google.com", true));
   EXPECT_TRUE(TransportSecurityState::IsGooglePinnedProperty(
       "accounts.google.com", true));
-  EXPECT_TRUE(TransportSecurityState::IsGooglePinnedProperty(
-      "doubleclick.net", true));
+  EXPECT_TRUE(
+      TransportSecurityState::IsGooglePinnedProperty("doubleclick.net", true));
   EXPECT_TRUE(TransportSecurityState::IsGooglePinnedProperty(
       "ad.doubleclick.net", true));
-  EXPECT_TRUE(TransportSecurityState::IsGooglePinnedProperty(
-      "youtube.com", true));
+  EXPECT_TRUE(
+      TransportSecurityState::IsGooglePinnedProperty("youtube.com", true));
   EXPECT_TRUE(TransportSecurityState::IsGooglePinnedProperty(
       "www.profiles.google.com", true));
   EXPECT_TRUE(TransportSecurityState::IsGooglePinnedProperty(
       "checkout.google.com", true));
   EXPECT_TRUE(TransportSecurityState::IsGooglePinnedProperty(
       "googleadservices.com", true));
 
   // Test with sni_enabled false:
-  EXPECT_FALSE(TransportSecurityState::IsGooglePinnedProperty(
-      "www.example.com", false));
-  EXPECT_FALSE(TransportSecurityState::IsGooglePinnedProperty(
-      "www.paypal.com", false));
+  EXPECT_FALSE(
+      TransportSecurityState::IsGooglePinnedProperty("www.example.com", false));
+  EXPECT_FALSE(
+      TransportSecurityState::IsGooglePinnedProperty("www.paypal.com", false));
   EXPECT_TRUE(TransportSecurityState::IsGooglePinnedProperty(
       "checkout.google.com", false));
   EXPECT_TRUE(TransportSecurityState::IsGooglePinnedProperty(
       "googleadservices.com", false));
 
   // Test some SNI hosts:
-  EXPECT_TRUE(TransportSecurityState::IsGooglePinnedProperty(
-      "gmail.com", true));
-  EXPECT_TRUE(TransportSecurityState::IsGooglePinnedProperty(
-      "googlegroups.com", true));
+  EXPECT_TRUE(
+      TransportSecurityState::IsGooglePinnedProperty("gmail.com", true));
+  EXPECT_TRUE(
+      TransportSecurityState::IsGooglePinnedProperty("googlegroups.com", true));
   EXPECT_TRUE(TransportSecurityState::IsGooglePinnedProperty(
       "www.googlegroups.com", true));
   // Expect to fail for SNI hosts when not searching the SNI list:
-  EXPECT_FALSE(TransportSecurityState::IsGooglePinnedProperty(
-      "gmail.com", false));
+  EXPECT_FALSE(
+      TransportSecurityState::IsGooglePinnedProperty("gmail.com", false));
   EXPECT_FALSE(TransportSecurityState::IsGooglePinnedProperty(
       "googlegroups.com", false));
   EXPECT_FALSE(TransportSecurityState::IsGooglePinnedProperty(
       "www.googlegroups.com", false));
 }
 
 }  // namespace net