net: HSTS list additions.

One special request for mygadgetguardian.lookout.com and an additional
Google domain.

Cr-Commit-Position: refs/heads/master@{#292030}

net/http/transport_security_state_static.h

@@ -467,6 +467,7 @@ static const struct HSTSPreload kPreloadedSTS[] = {
   {18, true, "\005" "admin" "\006" "google" "\003" "com", true, kGooglePins, DOMAIN_GOOGLE_COM },
   {23, true, "\005" "login" "\004" "corp" "\006" "google" "\003" "com", true, kGooglePins, DOMAIN_GOOGLE_COM },
   {17, false, "\004" "play" "\006" "google" "\003" "com", true, kGooglePins, DOMAIN_GOOGLE_COM },
+  {22, true, "\011" "passwords" "\006" "google" "\003" "com", true, kGooglePins, DOMAIN_GOOGLE_COM },
   {20, true, "\006" "market" "\007" "android" "\003" "com", true, kGooglePins, DOMAIN_ANDROID_COM },
   {26, true, "\003" "ssl" "\020" "google-analytics" "\003" "com", true, kGooglePins, DOMAIN_GOOGLE_ANALYTICS_COM },
   {18, true, "\005" "drive" "\006" "google" "\003" "com", true, kGooglePins, DOMAIN_GOOGLE_COM },
@@ -857,6 +858,7 @@ static const struct HSTSPreload kPreloadedSTS[] = {
   {17, true, "\003" "app" "\007" "lookout" "\003" "com", true, kNoPins, DOMAIN_NOT_PINNED },
   {17, true, "\003" "api" "\007" "lookout" "\003" "com", true, kNoPins, DOMAIN_NOT_PINNED },
   {23, true, "\011" "keymaster" "\007" "lookout" "\003" "com", true, kNoPins, DOMAIN_NOT_PINNED },
+  {30, true, "\020" "mygadgetguardian" "\007" "lookout" "\003" "com", true, kNoPins, DOMAIN_NOT_PINNED },
   {23, true, "\011" "discovery" "\007" "lookout" "\003" "com", true, kNoPins, DOMAIN_NOT_PINNED },
   {18, true, "\014" "mobilethreat" "\003" "net", true, kNoPins, DOMAIN_NOT_PINNED },
   {25, true, "\023" "mobilethreatnetwork" "\003" "net", true, kNoPins, DOMAIN_NOT_PINNED },

net/http/transport_security_state_static.json

@@ -215,6 +215,7 @@
     { "name": "login.corp.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
     // play.google.com doesn't have include_subdomains because of crbug.com/327834.
     { "name": "play.google.com", "mode": "force-https", "pins": "google" },
+    { "name": "passwords.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
 
     // Other Google-related domains that must use HTTPS.
     { "name": "market.android.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
@@ -619,6 +620,7 @@
     { "name": "app.lookout.com", "include_subdomains": true, "mode": "force-https" },
     { "name": "api.lookout.com", "include_subdomains": true, "mode": "force-https" },
     { "name": "keymaster.lookout.com", "include_subdomains": true, "mode": "force-https" },
+    { "name": "mygadgetguardian.lookout.com", "include_subdomains": true, "mode": "force-https" },
     { "name": "discovery.lookout.com", "include_subdomains": true, "mode": "force-https" },
     { "name": "mobilethreat.net", "include_subdomains": true, "mode": "force-https" },
     { "name": "mobilethreatnetwork.net", "include_subdomains": true, "mode": "force-https" },