Add enterprise policy to exempt hosts from Certificate Transparency

chrome/browser/policy/configuration_policy_handler_list_factory.cc

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/policy/configuration_policy_handler_list_factory.h"
 
 #include <limits.h>
 #include <stddef.h>
 
 #include <utility>
 
 #include "base/bind.h"
 #include "base/macros.h"
 #include "base/memory/ptr_util.h"
 #include "base/memory/scoped_vector.h"
 #include "base/values.h"
 #include "build/build_config.h"
 #include "chrome/browser/net/disk_cache_dir_policy_handler.h"
 #include "chrome/browser/policy/file_selection_dialogs_policy_handler.h"
 #include "chrome/browser/policy/javascript_policy_handler.h"
 #include "chrome/browser/policy/managed_bookmarks_policy_handler.h"
 #include "chrome/browser/policy/network_prediction_policy_handler.h"
 #include "chrome/browser/profiles/incognito_mode_policy_handler.h"
 #include "chrome/browser/sessions/restore_on_startup_policy_handler.h"
 #include "chrome/common/chrome_switches.h"
 #include "chrome/common/features.h"
 #include "chrome/common/pref_names.h"
 #include "components/bookmarks/common/bookmark_pref_names.h"
+#include "components/certificate_transparency/pref_names.h"
 #include "components/content_settings/core/common/pref_names.h"
 #include "components/metrics/metrics_pref_names.h"
 #include "components/password_manager/core/common/password_manager_pref_names.h"
 #include "components/policy/core/browser/autofill_policy_handler.h"
 #include "components/policy/core/browser/configuration_policy_handler.h"
 #include "components/policy/core/browser/configuration_policy_handler_list.h"
 #include "components/policy/core/browser/configuration_policy_handler_parameters.h"
 #include "components/policy/core/browser/proxy_policy_handler.h"
 #include "components/policy/core/browser/url_blacklist_policy_handler.h"
 #include "components/policy/core/common/policy_details.h"
@@ skipping 616 matching lines @@
 
   handlers->AddHandler(base::WrapUnique(new AutofillPolicyHandler()));
   handlers->AddHandler(base::WrapUnique(new DefaultSearchPolicyHandler()));
   handlers->AddHandler(base::WrapUnique(new ForceSafeSearchPolicyHandler()));
   handlers->AddHandler(base::WrapUnique(new IncognitoModePolicyHandler()));
   handlers->AddHandler(
       base::WrapUnique(new ManagedBookmarksPolicyHandler(chrome_schema)));
   handlers->AddHandler(base::WrapUnique(new ProxyPolicyHandler()));
   handlers->AddHandler(base::WrapUnique(new URLBlacklistPolicyHandler()));
 
+  handlers->AddHandler(base::WrapUnique(new SimpleSchemaValidatingPolicyHandler(
+      key::kCertificateTransparencyEnforcementDisabledForUrls,
+      certificate_transparency::prefs::kCTExcludedHosts, chrome_schema,
+      SCHEMA_STRICT, SimpleSchemaValidatingPolicyHandler::RECOMMENDED_ALLOWED,
+      SimpleSchemaValidatingPolicyHandler::MANDATORY_ALLOWED)));
+
 #if BUILDFLAG(ANDROID_JAVA_UI)
   handlers->AddHandler(
       base::WrapUnique(new ContextualSearchPolicyHandlerAndroid()));
 #endif
 
   handlers->AddHandler(
       base::WrapUnique(new FileSelectionDialogsPolicyHandler()));
   handlers->AddHandler(base::WrapUnique(new JavascriptPolicyHandler()));
   handlers->AddHandler(base::WrapUnique(new NetworkPredictionPolicyHandler()));
   handlers->AddHandler(base::WrapUnique(new RestoreOnStartupPolicyHandler()));
@@ skipping 177 matching lines @@
       SimpleSchemaValidatingPolicyHandler::RECOMMENDED_ALLOWED,
       SimpleSchemaValidatingPolicyHandler::MANDATORY_PROHIBITED)));
   handlers->AddHandler(base::WrapUnique(
       new chromeos::KeyPermissionsPolicyHandler(chrome_schema)));
 #endif  // defined(OS_CHROMEOS)
 
   return handlers;
 }
 
 }  // namespace policy