net: add HSTS and cert pinning for Tor.

net/base/transport_security_state_unittest.cc

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/base/transport_security_state.h"
 #include "testing/gtest/include/gtest/gtest.h"
 
 namespace net {
 
 class TransportSecurityStateTest : public testing::Test {
@@ skipping 645 matching lines @@
   EXPECT_TRUE(state->IsEnabledForHost(&domain_state,
                                       "foo.ebanking.indovinabank.com.vn",
                                       false));
 
   EXPECT_TRUE(state->IsEnabledForHost(&domain_state,
                                       "epoxate.com",
                                       false));
   EXPECT_FALSE(state->IsEnabledForHost(&domain_state,
                                        "foo.epoxate.com",
                                        false));
+
+  EXPECT_TRUE(state->IsEnabledForHost(&domain_state,
+                                      "torproject.org",
+                                      false));
+  EXPECT_TRUE(domain_state.public_key_hashes.size() != 0);
+  EXPECT_TRUE(state->IsEnabledForHost(&domain_state,
+                                      "www.torproject.org",
+                                      false));
+  EXPECT_TRUE(domain_state.public_key_hashes.size() != 0);
+  EXPECT_TRUE(state->IsEnabledForHost(&domain_state,
+                                      "check.torproject.org",
+                                      false));
+  EXPECT_TRUE(domain_state.public_key_hashes.size() != 0);
+  EXPECT_TRUE(state->IsEnabledForHost(&domain_state,
+                                      "blog.torproject.org",
+                                      false));
+  EXPECT_TRUE(domain_state.public_key_hashes.size() != 0);
+
+  EXPECT_FALSE(state->IsEnabledForHost(&domain_state,
+                                       "foo.torproject.org",
+                                       false));
 }
 
 TEST_F(TransportSecurityStateTest, LongNames) {
   scoped_refptr<TransportSecurityState> state(
       new TransportSecurityState(std::string()));
   const char kLongName[] =
       "lookupByWaveIdHashAndWaveIdIdAndWaveIdDomainAndWaveletIdIdAnd"
       "WaveletIdDomainAndBlipBlipid";
   TransportSecurityState::DomainState domain_state;
   // Just checks that we don't hit a NOTREACHED.
@@ skipping 172 matching lines @@
   domain_state = TransportSecurityState::DomainState();
   const base::Time current_time(base::Time::Now());
   const base::Time expiry = current_time + base::TimeDelta::FromSeconds(1000);
   domain_state.expiry = expiry;
   state->EnableHost("www.google.com", domain_state);
 
   EXPECT_TRUE(state->IsEnabledForHost(&domain_state, "www.google.com", true));
 }
 
 }  // namespace net