Make extension file URL access opt-in.

chrome/browser/extensions/extension_service_unittest.cc

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/extensions/extension_service_unittest.h"
 
 #include <algorithm>
 #include <set>
 #include <vector>
 
@@ skipping 1738 matching lines @@
 
   // Another app with non-overlapping extent. Should succeed.
   PackAndInstallCrx(data_dir_.AppendASCII("app2"), true);
   ValidatePrefKeyCount(++pref_count);
 
   // A third app whose extent overlaps the first. Should fail.
   PackAndInstallCrx(data_dir_.AppendASCII("app3"), false);
   ValidatePrefKeyCount(pref_count);
 }
 
+// Tests that file access if OFF by default.

[asargent_no_longer_on_chrome, 2011/08/04 21:56:03]

typo: "access if OFF" -> "access is OFF"

[jstritar, 2011/08/05 15:13:29]

Done.

+TEST_F(ExtensionServiceTest, DefaultFileAccess) {
+  InitializeEmptyExtensionService();
+  PackAndInstallCrx(data_dir_.AppendASCII("permissions").AppendASCII("files"),
+                    true);
+
+  EXPECT_EQ(0u, GetErrors().size());
+  EXPECT_EQ(1u, service_->extensions()->size());
+  std::string id = service_->extensions()->at(0)->id();
+  EXPECT_FALSE(service_->extension_prefs()->AllowFileAccess(id));
+}
+
 TEST_F(ExtensionServiceTest, UpdateApps) {
   InitializeEmptyExtensionService();
   FilePath extensions_path = data_dir_.AppendASCII("app_update");
 
   // First install v1 of a hosted app.
   InstallCrx(extensions_path.AppendASCII("v1.crx"), true);
   ASSERT_EQ(1u, service_->extensions()->size());
   std::string id = service_->extensions()->at(0)->id();
   ASSERT_EQ(std::string("1"),
             service_->extensions()->at(0)->version()->GetString());
@@ skipping 2027 matching lines @@
   ASSERT_FALSE(AddPendingSyncInstall());
 
   // Wait for the external source to install.
   WaitForCrxInstall(crx_path_, true);
   ASSERT_TRUE(IsCrxInstalled());
 
   // Now that the extension is installed, sync request should fail
   // because the extension is already installed.
   ASSERT_FALSE(AddPendingSyncInstall());
 }