add network audit whitelist entries for crlset PR

fix #2271

Author: diracdeltas

lib/whitelistedUrlPrefixes.js

@@ -1,14 +1,25 @@
 // Before adding to this list, get approval from the security team
 module.exports = [
+  'http://update.googleapis.com/service/update2', // allowed because it 307's to go-updater.brave.com. should never actually connect to googleapis.com.
   'https://update.googleapis.com/service/update2', // allowed because it 307's to go-updater.brave.com. should never actually connect to googleapis.com.
   'https://safebrowsing.googleapis.com/v4/threatListUpdates', // allowed because it 307's to safebrowsing.brave.com
+  'http://redirector.gvt1.com/edgedl/release2/chrome_component/', // allowed because it 307's to crlset2.brave.com
+  'https://redirector.gvt1.com/edgedl/release2/chrome_component/', // allowed because it 307's to crlset2.brave.com
+  'https://clients2.googleusercontent.com/crx/blobs/',
+  'http://dl.google.com/release2/chrome_component/', // allowed because it 307's to crlset1.brave.com
+  'https://dl.google.com/release2/chrome_component/', // allowed because it 307's to crlset1.brave.com
   'https://no-thanks.invalid/', // fake gaia URL
   'https://go-updater.brave.com/',
   'https://safebrowsing.brave.com/',
   'https://brave-core-ext.s3.brave.com/',
   'https://laptop-updates.brave.com/',
   'https://static.brave.com/',
   'https://static1.brave.com/',
+  'http://componentupdater.brave.com/service/update2', // allowed because it 307's to https://componentupdater.brave.com
+  'https://componentupdater.brave.com/service/update2',
+  'https://crlsets2.brave.com/',
+  'https://crlsets1.brave.com/',
+  'https://crxdownload.brave.com/crx/blobs/',
   'https://ledger.mercury.basicattentiontoken.org/',
   'https://ledger-staging.mercury.basicattentiontoken.org/',
   'https://balance.mercury.basicattentiontoken.org/',