Add managed policies for Native Messaging

chrome/browser/policy/policy_browsertest.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include <algorithm>
 #include <string>
 #include <vector>
 
 #include "base/bind.h"
 #include "base/bind_helpers.h"
@@ skipping 15 matching lines @@
 #include "base/time/time.h"
 #include "base/values.h"
 #include "chrome/app/chrome_command_ids.h"
 #include "chrome/browser/autocomplete/autocomplete_controller.h"
 #include "chrome/browser/background/background_contents_service.h"
 #include "chrome/browser/browser_process.h"
 #include "chrome/browser/chrome_notification_types.h"
 #include "chrome/browser/content_settings/tab_specific_content_settings.h"
 #include "chrome/browser/devtools/devtools_window.h"
 #include "chrome/browser/download/download_prefs.h"
+#include "chrome/browser/extensions/api/messaging/native_message_process_host.h"
 #include "chrome/browser/extensions/crx_installer.h"
 #include "chrome/browser/extensions/extension_host.h"
 #include "chrome/browser/extensions/extension_service.h"
 #include "chrome/browser/extensions/extension_system.h"
 #include "chrome/browser/extensions/unpacked_installer.h"
 #include "chrome/browser/extensions/updater/extension_updater.h"
 #include "chrome/browser/infobars/infobar.h"
 #include "chrome/browser/infobars/infobar_service.h"
 #include "chrome/browser/media/media_capture_devices_dispatcher.h"
 #include "chrome/browser/media/media_stream_devices_controller.h"
@@ skipping 2825 matching lines @@
   const GURL url =
       chrome_variations::VariationsService::GetVariationsServerURL(
           g_browser_process->local_state());
   EXPECT_TRUE(StartsWithASCII(url.spec(), default_variations_url, true));
   std::string value;
   EXPECT_TRUE(net::GetValueForKeyInQuery(url, "restrict", &value));
   EXPECT_EQ("restricted", value);
 }
 #endif
 
+IN_PROC_BROWSER_TEST_F(PolicyTest, NativeMessagingBlacklistSelective) {
+  base::ListValue blacklist;
+  blacklist.Append(base::Value::CreateStringValue("host.name"));
+  PolicyMap policies;
+  policies.Set(key::kNativeMessagingBlacklist, POLICY_LEVEL_MANDATORY,
+               POLICY_SCOPE_USER, blacklist.DeepCopy(), NULL);
+  UpdateProviderPolicy(policies);
+
+  PrefService* prefs = browser()->profile()->GetPrefs();
+  EXPECT_FALSE(extensions::NativeMessageProcessHost::IsHostAllowed(
+      prefs, "host.name"));
+  EXPECT_TRUE(extensions::NativeMessageProcessHost::IsHostAllowed(
+      prefs, "other.host.name"));
+}
+
+IN_PROC_BROWSER_TEST_F(PolicyTest, NativeMessagingBlacklistWildcard) {
+  base::ListValue blacklist;
+  blacklist.Append(base::Value::CreateStringValue("*"));
+  PolicyMap policies;
+  policies.Set(key::kNativeMessagingBlacklist, POLICY_LEVEL_MANDATORY,
+               POLICY_SCOPE_USER, blacklist.DeepCopy(), NULL);
+  UpdateProviderPolicy(policies);
+
+  PrefService* prefs = browser()->profile()->GetPrefs();
+  EXPECT_FALSE(extensions::NativeMessageProcessHost::IsHostAllowed(
+      prefs, "host.name"));
+  EXPECT_FALSE(extensions::NativeMessageProcessHost::IsHostAllowed(
+      prefs, "other.host.name"));
+}
+
+IN_PROC_BROWSER_TEST_F(PolicyTest, NativeMessagingWhitelist) {
+  base::ListValue blacklist;
+  blacklist.Append(base::Value::CreateStringValue("*"));
+  base::ListValue whitelist;
+  whitelist.Append(base::Value::CreateStringValue("host.name"));
+  PolicyMap policies;
+  policies.Set(key::kNativeMessagingBlacklist, POLICY_LEVEL_MANDATORY,
+               POLICY_SCOPE_USER, blacklist.DeepCopy(), NULL);
+  policies.Set(key::kNativeMessagingWhitelist, POLICY_LEVEL_MANDATORY,
+               POLICY_SCOPE_USER, whitelist.DeepCopy(), NULL);
+  UpdateProviderPolicy(policies);
+
+  PrefService* prefs = browser()->profile()->GetPrefs();
+  EXPECT_TRUE(extensions::NativeMessageProcessHost::IsHostAllowed(
+      prefs, "host.name"));
+  EXPECT_FALSE(extensions::NativeMessageProcessHost::IsHostAllowed(
+      prefs, "other.host.name"));
+}
+
 }  // namespace policy