Don't disable extensions immediately if verification is out of date

chrome/browser/extensions/install_verifier.h

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CHROME_BROWSER_EXTENSIONS_INSTALL_VERIFIER_H_
 #define CHROME_BROWSER_EXTENSIONS_INSTALL_VERIFIER_H_
 
 #include <queue>
 #include <set>
 #include <string>
@@ skipping 35 matching lines @@
 
   // Initializes this object for use, including reading preferences and
   // validating the stored signature.
   void Init();
 
   // Do we need to be bootstrapped? (i.e. do we have a signature already). If
   // this is true, then consumers of this class should use Add/AddMany to get
   // an initial one so that MustRemainDisabled can actually check against it.
   bool NeedsBootstrap();
 
+  // Returns the timestamp of our InstallSignature, if we have one.
+  base::Time SignatureTimestamp();
+
   // A callback for indicating success/failure of adding new ids.
   typedef base::Callback<void(bool)> AddResultCallback;
 
   // Try adding a new |id| (or set of ids) to the list of verified ids. When
   // this process is finished |callback| will be run with success/failure of
   // the signature request (not necessarily whether the ids were verified).
   void Add(const std::string& id, const AddResultCallback& callback);
   void AddMany(const ExtensionIdSet& ids,
                const AddResultCallback& callback);
 
@@ skipping 34 matching lines @@
 
   // Removes any no-longer-installed ids, requesting a new signature if needed.
   void GarbageCollect();
 
   // Returns whether an extension id is allowed by policy.
   bool AllowedByEnterprisePolicy(const std::string& id) const;
 
   // Returns whether the given |id| is included in our verified signature.
   bool IsVerified(const std::string& id) const;
 
+  // Returns true if the extension with |id| was installed later than the
+  // timestamp of our signature.
+  bool WasInstalledAfterSignature(const std::string& id) const;
+
   // Begins the process of fetching a new signature, based on applying the
   // operation at the head of the queue to the current set of ids in
   // |signature_| (if any) and then sending a request to sign that.
   void BeginFetch();
 
   // Saves the current value of |signature_| to the prefs;
   void SaveToPrefs();
 
   // Called with the result of a signature request, or NULL on failure.
   void SignatureCallback(scoped_ptr<InstallSignature> signature);
@@ skipping 14 matching lines @@
   // A set of ids that have been provisionally added, which we're willing to
   // consider allowed until we hear back from the server signature request.
   ExtensionIdSet provisional_;
 
   DISALLOW_COPY_AND_ASSIGN(InstallVerifier);
 };
 
 }  // namespace extensions
 
 #endif  // CHROME_BROWSER_EXTENSIONS_INSTALL_VERIFIER_H_