Use .cn URLs for validation on Chinese SIM cards.

Currently, when using a Chinese SIM card, network validation will
use connectivitycheck.gstatic.com. This is sometimes subject to
DNS poisoning. Use connectivitycheck.gstatic.cn instead for both
HTTP and HTTPS. The default fallback probe is already set to a
China-specific domain.

Test: m
Test: wget -O - https://connectivitycheck.gstatic.cn/generate_204
Bug: 179021745
Bug: 229934127
Change-Id: Icfb97d3b0af41d9a2c1e43286627d8612affd161
diff --git a/res/values-mcc460/config.xml b/res/values-mcc460/config.xml
index 2863edd..3c4b493 100644
--- a/res/values-mcc460/config.xml
+++ b/res/values-mcc460/config.xml
@@ -5,13 +5,20 @@
          general case as this could degrade the user experience (portals not detected properly).
          However in China the default URLs are not accessible in general. The below alternatives
          should allow users to connect to local networks normally. -->
+    <!-- default_captive_portal_http_url is not configured as overlayable so
+         OEMs that wish to change captive_portal_http_url configuration must
+         do so via configuring runtime resource overlay to
+         config_captive_portal_http_url and *NOT* by changing or overlaying
+         this resource. It will break if the enforcement of overlayable starts.
+         -->
+    <string name="default_captive_portal_http_url" translatable="false">http://connectivitycheck.gstatic.cn/generate_204</string>
     <!-- default_captive_portal_https_url is not configured as overlayable so
          OEMs that wish to change captive_portal_https_url configuration must
          do so via configuring runtime resource overlay to
          config_captive_portal_https_url and *NOT* by changing or overlaying
          this resource. It will break if the enforcement of overlayable starts.
          -->
-    <string name="default_captive_portal_https_url" translatable="false">https://connectivitycheck.gstatic.com/generate_204</string>
+    <string name="default_captive_portal_https_url" translatable="false">https://connectivitycheck.gstatic.cn/generate_204</string>
     <!-- default_captive_portal_fallback_urls is not configured as overlayable
          so OEMs that wish to change captive_portal_fallback_urls configuration
          must do so via configuring runtime resource overlay to