Disallow syncing of extensions with third-party update URLs or plugins.

chrome/browser/extensions/extension_updater.cc

Index: chrome/browser/extensions/extension_updater.cc
diff --git a/chrome/browser/extensions/extension_updater.cc b/chrome/browser/extensions/extension_updater.cc
index d2186942af719b346641491f46db4ad88ffaaef7..232d9ddd56123e84eaeed776511a650a27217996 100644
--- a/chrome/browser/extensions/extension_updater.cc
+++ b/chrome/browser/extensions/extension_updater.cc
@@ -235,7 +235,9 @@ void ManifestFetchesBuilder::AddExtensionData(
   } else if (update_url.is_empty()) {
     url_stats_.no_url_count++;
     // Fill in default update URL.
-    update_url = GURL(extension_urls::kGalleryUpdateURL);
+    //
+    // TODO(akalin): Figure out if we should use the HTTPS version.
+    update_url = GURL(extension_urls::kGalleryUpdateHttpUrl);

[asargent_no_longer_on_chrome, 2010/07/20 18:08:38]

FYI, we intentionally picked the http one here because extension updating relies
on the keypair used to sign the crx files. If we find we need to switch to
https, we should touch base with the Omaha folks to make sure they can handle
the extra load, and we might consider using https only for the sync case or
something.

   } else {
     url_stats_.other_url_count++;
   }