Add a centralized mechanism for whitelisting access to extension permissions.

chrome/common/extensions/extension_permission_set.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/common/extensions/extension_permission_set.h"
 
 #include <algorithm>
 #include <string>
 
+#include "base/command_line.h"
 #include "base/memory/singleton.h"
 #include "base/values.h"
 #include "base/string_number_conversions.h"
 #include "base/utf_string_conversions.h"
+#include "chrome/common/chrome_switches.h"
 #include "chrome/common/extensions/extension.h"
 #include "chrome/common/extensions/extension_constants.h"
 #include "chrome/common/extensions/extension_l10n_util.h"
 #include "chrome/common/extensions/url_pattern.h"
 #include "chrome/common/extensions/url_pattern_set.h"
 #include "content/public/common/url_constants.h"
 #include "grit/generated_resources.h"
 #include "net/base/registry_controlled_domain.h"
 #include "ui/base/l10n/l10n_util.h"
 
@@ skipping 35 matching lines @@
 const char* kNonPermissionFunctionNames[] = {
   "management.getPermissionWarningsByManifest",
   "tabs.create",
   "tabs.onRemoved",
   "tabs.remove",
   "tabs.update",
 };
 const size_t kNumNonPermissionFunctionNames =
     arraysize(kNonPermissionFunctionNames);
 
+// ExtensionAPIPermission::kTerminalPrivate whitelist.
+const char* kTerminalPrivateWhitelist[] = {
+  "pnhechapfaindjhompbnflcldabbghjo"   // HTerm app.
+};
+
+// ExtensionAPIPermission::kWebSocketProxyPrivate whitelist.
+// ExtensionAPIPermission::kInputMethodPrivate whitelist.
+const char* kChromeOSWhitelist[] = {
+  "haiffjcadagjlijoggckpgfnoeiflnem",
+  "gnedhmakppccajfpfiihfcdlnpgomkcf",
+  "fjcibdnjlbfnbfdjneajpipnlcppleek",
+  "okddffdblfhhnmhodogpojmfkjmhinfp",
+  "pnhechapfaindjhompbnflcldabbghjo"   // HTerm app.
+};
+
+// ExtensionAPIPermission::kChromePrivate whitelist.
+const char* kChromePrivateWhitelist[] = {
+  "haiffjcadagjlijoggckpgfnoeiflnem",
+  "gnedhmakppccajfpfiihfcdlnpgomkcf",
+  "fjcibdnjlbfnbfdjneajpipnlcppleek"
+};
+
+// ExtensionAPIPermission::kChromeAuthPrivate whitelist.
+const char* kChromeAuthPrivateWhitelist[] = {
+  extension_misc::kCloudPrintAppId
+};
+
+// ExtensionAPIPermission::kWebstorePrivate whitelist.
+const char* kWebstorePrivateWhitelist[] = {
+  extension_misc::kEnterpriseWebStoreAppId,
+  extension_misc::kWebStoreAppId
+};
+
 const char kOldUnlimitedStoragePermission[] = "unlimited_storage";
 const char kWindowsPermission[] = "windows";
 
 void AddPatternsAndRemovePaths(const URLPatternSet& set, URLPatternSet* out) {
   DCHECK(out);
   for (URLPatternSet::const_iterator i = set.begin(); i != set.end(); ++i) {
     URLPattern p = *i;
     p.SetPath("/*");
     out->AddPattern(p);
   }
@@ skipping 112 matching lines @@
       kFlagCannotBeOptional, kTypeAll);
   info->RegisterPermission(
       kNotification, "notifications", 0,
       ExtensionPermissionMessage::kNone, kFlagNone, kTypeAll);
   info->RegisterPermission(
       kUnlimitedStorage, "unlimitedStorage", 0,
       ExtensionPermissionMessage::kNone, kFlagCannotBeOptional, kTypeAll);
 
   // Register hosted app permissions that are also private.
   info->RegisterPermission(
-      kChromePrivate, "chromePrivate", 0,
-      ExtensionPermissionMessage::kNone, kFlagCannotBeOptional,
+      kChromePrivate, "chromePrivate", 0, ExtensionPermissionMessage::kNone,
+      kFlagCannotBeOptional | kFlagEnforceWhitelist,
       kTypeAll - kTypePlatformApp);
   info->RegisterPermission(
       kChromeAuthPrivate, "chromeAuthPrivate", 0,
       ExtensionPermissionMessage::kNone,
-      kFlagComponentOnly | kFlagCannotBeOptional, kTypeAll - kTypePlatformApp);
+      kFlagComponentOnly | kFlagCannotBeOptional | kFlagEnforceWhitelist,
+      kTypeAll - kTypePlatformApp);
   info->RegisterPermission(
       kWebstorePrivate, "webstorePrivate", 0,
       ExtensionPermissionMessage::kNone,
-      kFlagComponentOnly | kFlagCannotBeOptional, kTypeAll - kTypePlatformApp);
+      kFlagComponentOnly | kFlagCannotBeOptional | kFlagEnforceWhitelist,
+      kTypeAll - kTypePlatformApp);
 
   // Register hosted and packaged app permissions.
   info->RegisterPermission(
       kAppNotifications, "appNotifications", 0,
       ExtensionPermissionMessage::kNone, kFlagNone,
       kTypeHostedApp | kTypePackagedApp);
 
   // Register extension permissions.
   info->RegisterPermission(
       kBookmark, "bookmarks", IDS_EXTENSION_PROMPT_WARNING_BOOKMARKS,
@@ skipping 17 matching lines @@
       ExtensionPermissionMessage::kBrowsingHistory,
       kFlagNone, kTypeDefault);
   info->RegisterPermission(
       kIdle, "idle", 0, ExtensionPermissionMessage::kNone,
       kFlagNone, kTypeDefault);
   info->RegisterPermission(
       kInput, "input", 0, ExtensionPermissionMessage::kNone,
       kFlagImpliesFullURLAccess, kTypeDefault);
   info->RegisterPermission(
       kInputMethodPrivate, "inputMethodPrivate", 0,
-      ExtensionPermissionMessage::kNone, kFlagCannotBeOptional, kTypeDefault);
+      ExtensionPermissionMessage::kNone,
+      kFlagCannotBeOptional | kFlagEnforceWhitelist, kTypeDefault);
   info->RegisterPermission(
       kManagement, "management", IDS_EXTENSION_PROMPT_WARNING_MANAGEMENT,
       ExtensionPermissionMessage::kManagement, kFlagNone, kTypeDefault);
   info->RegisterPermission(
       kPageCapture, "pageCapture",
       IDS_EXTENSION_PROMPT_WARNING_ALL_PAGES_CONTENT,
       ExtensionPermissionMessage::kAllPageContent, kFlagNone, kTypeDefault);
   info->RegisterPermission(
       kPrivacy, "privacy", IDS_EXTENSION_PROMPT_WARNING_PRIVACY,
       ExtensionPermissionMessage::kPrivacy, kFlagNone, kTypeDefault);
   info->RegisterPermission(
       kTab, "tabs", IDS_EXTENSION_PROMPT_WARNING_TABS,
       ExtensionPermissionMessage::kTabs, kFlagNone,
       kTypeDefault - kTypePlatformApp);
   info->RegisterPermission(
-      kTerminalPrivate, "terminalPrivate", 0,
-      ExtensionPermissionMessage::kNone, kFlagCannotBeOptional, kTypeDefault);
+      kTerminalPrivate, "terminalPrivate", 0, ExtensionPermissionMessage::kNone,
+      kFlagCannotBeOptional | kFlagEnforceWhitelist, kTypeDefault);
   info->RegisterPermission(
       kTts, "tts", 0,
       ExtensionPermissionMessage::kNone, kFlagCannotBeOptional, kTypeDefault);
   info->RegisterPermission(
       kTtsEngine, "ttsEngine", IDS_EXTENSION_PROMPT_WARNING_TTS_ENGINE,
       ExtensionPermissionMessage::kTtsEngine,
       kFlagCannotBeOptional, kTypeDefault);
   info->RegisterPermission(
       kWebNavigation, "webNavigation",
       IDS_EXTENSION_PROMPT_WARNING_TABS, ExtensionPermissionMessage::kTabs,
       kFlagNone, kTypeDefault - kTypePlatformApp);
   info->RegisterPermission(
       kWebRequest, "webRequest", 0, ExtensionPermissionMessage::kNone,
       kFlagNone, kTypeDefault - kTypePlatformApp);
   info->RegisterPermission(
       kWebRequestBlocking, "webRequestBlocking", 0,
       ExtensionPermissionMessage::kNone, kFlagNone,
       kTypeDefault - kTypePlatformApp);
   info->RegisterPermission(
       kWebSocketProxyPrivate, "webSocketProxyPrivate", 0,
-      ExtensionPermissionMessage::kNone, kFlagCannotBeOptional,
+      ExtensionPermissionMessage::kNone,
+      kFlagCannotBeOptional | kFlagEnforceWhitelist,
       kTypeDefault - kTypePlatformApp);
 
   // Register private permissions.
   info->RegisterPermission(
       kChromeosInfoPrivate, "chromeosInfoPrivate", 0,
       ExtensionPermissionMessage::kNone,
       kFlagComponentOnly | kFlagCannotBeOptional, kTypeDefault);
   info->RegisterPermission(
       kFileBrowserPrivate, "fileBrowserPrivate", 0,
       ExtensionPermissionMessage::kNone,
@@ skipping 33 matching lines @@
   // Platform-app permissions.
   info->RegisterPermission(
       kSocket, "socket", 0, ExtensionPermissionMessage::kNone,
       kFlagCannotBeOptional, kTypePlatformApp);
 
   // Register aliases.
   info->RegisterAlias("unlimitedStorage", kOldUnlimitedStoragePermission);
   info->RegisterAlias("tabs", kWindowsPermission);
 }
 
+// static
+void ExtensionAPIPermission::RegisterWhitelists(
+    ExtensionPermissionsInfo* info) {
+  info->RegisterWhitelist(kTerminalPrivate,
+                          kTerminalPrivateWhitelist,
+                          arraysize(kTerminalPrivateWhitelist));
+  info->RegisterWhitelist(kWebSocketProxyPrivate,
+                          kChromeOSWhitelist,
+                          arraysize(kChromeOSWhitelist));
+  info->RegisterWhitelist(kChromePrivate,
+                          kChromePrivateWhitelist,
+                          arraysize(kChromePrivateWhitelist));
+  info->RegisterWhitelist(kInputMethodPrivate,
+                          kChromeOSWhitelist,
+                          arraysize(kChromeOSWhitelist));
+  info->RegisterWhitelist(kChromeAuthPrivate,
+                          kChromeAuthPrivateWhitelist,
+                          arraysize(kChromeAuthPrivateWhitelist));
+  info->RegisterWhitelist(kWebstorePrivate,
+                          kWebstorePrivateWhitelist,
+                          arraysize(kWebstorePrivateWhitelist));
+}
+
+bool ExtensionAPIPermission::IsWhitelisted(
+    const std::string& extension_id) const {
+  DCHECK(should_enforce_whitelist());
+  return whitelist_.find(extension_id) != whitelist_.end();
+}
+
+void ExtensionAPIPermission::AddToWhitelist(const std::string& extension_id) {
+  DCHECK(should_enforce_whitelist());
+  whitelist_.insert(extension_id);
+}
+
 //
 // ExtensionPermissionsInfo
 //
 
 // static
 ExtensionPermissionsInfo* ExtensionPermissionsInfo::GetInstance() {
   return Singleton<ExtensionPermissionsInfo>::get();
 }
 
 ExtensionAPIPermission* ExtensionPermissionsInfo::GetByID(
@@ skipping 28 matching lines @@
 
 ExtensionPermissionsInfo::~ExtensionPermissionsInfo() {
   for (IDMap::iterator i = id_map_.begin(); i != id_map_.end(); ++i)
     delete i->second;
 }
 
 ExtensionPermissionsInfo::ExtensionPermissionsInfo()
     : hosted_app_permission_count_(0),
       permission_count_(0) {
   ExtensionAPIPermission::RegisterAllPermissions(this);
+  ExtensionAPIPermission::RegisterWhitelists(this);
 }
 
 void ExtensionPermissionsInfo::RegisterAlias(
     const char* name, const char* alias) {
   DCHECK(name_map_.find(name) != name_map_.end());
   DCHECK(name_map_.find(alias) == name_map_.end());
   name_map_[alias] = name_map_[name];
 }
 
 void ExtensionPermissionsInfo::RegisterPermission(
     ExtensionAPIPermission::ID id,
     const char* name,
     int l10n_message_id,
     ExtensionPermissionMessage::ID message_id,
     int flags,
     int type_restrictions) {
   DCHECK(id_map_.find(id) == id_map_.end());
   DCHECK(name_map_.find(name) == name_map_.end());
 
   ExtensionAPIPermission* permission = new ExtensionAPIPermission(
       id, name, l10n_message_id, message_id, flags, type_restrictions);
 
   id_map_[id] = permission;
   name_map_[name] = permission;
 
   permission_count_++;
 }
 
+void ExtensionPermissionsInfo::RegisterWhitelist(
+    ExtensionAPIPermission::ID id,
+    const char* whitelist[],
+    int whitelist_length) {
+  ExtensionAPIPermission* permission = GetByID(id);
+  DCHECK(permission->should_enforce_whitelist());
+
+  for (int x = 0; x < whitelist_length; ++x)
+    permission->AddToWhitelist(whitelist[x]);
+
+  // Tests can add an extension ID to the whitelists via the command line.
+  CommandLine* command_line = CommandLine::ForCurrentProcess();
+  if (command_line->HasSwitch(switches::kWhitelistedExtensionID))
+    permission->AddToWhitelist(command_line->GetSwitchValueASCII(
+        switches::kWhitelistedExtensionID));
+}
+
 //
 // ExtensionPermissionSet
 //
 
 ExtensionPermissionSet::ExtensionPermissionSet() {
 }
 
 ExtensionPermissionSet::ExtensionPermissionSet(
     const Extension* extension,
     const ExtensionAPIPermissionSet& apis,
@@ skipping 440 matching lines @@
   std::set<std::string> new_hosts_set(GetDistinctHosts(new_list, false, false));
   std::set<std::string> old_hosts_set(GetDistinctHosts(old_list, false, false));
   std::set<std::string> new_hosts_only;
 
   std::set_difference(new_hosts_set.begin(), new_hosts_set.end(),
                       old_hosts_set.begin(), old_hosts_set.end(),
                       std::inserter(new_hosts_only, new_hosts_only.begin()));
 
   return !new_hosts_only.empty();
 }