OLD | NEW |
1 // Copyright 2013 The Chromium Authors. All rights reserved. | 1 // Copyright 2013 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #include "chrome/browser/chromeos/extensions/device_local_account_management_pol
icy_provider.h" | 5 #include "chrome/browser/chromeos/extensions/device_local_account_management_pol
icy_provider.h" |
6 | 6 |
7 #include <stddef.h> | 7 #include <stddef.h> |
8 | 8 |
9 #include <cstddef> | 9 #include <cstddef> |
10 #include <string> | 10 #include <string> |
11 | 11 |
12 #include "base/logging.h" | 12 #include "base/logging.h" |
| 13 #include "base/strings/string_util.h" |
13 #include "base/strings/utf_string_conversions.h" | 14 #include "base/strings/utf_string_conversions.h" |
14 #include "base/values.h" | 15 #include "base/values.h" |
15 #include "chrome/grit/generated_resources.h" | 16 #include "chrome/grit/generated_resources.h" |
16 #include "extensions/common/extension.h" | 17 #include "extensions/common/extension.h" |
17 #include "extensions/common/manifest.h" | 18 #include "extensions/common/manifest.h" |
18 #include "extensions/common/manifest_constants.h" | 19 #include "extensions/common/manifest_constants.h" |
19 #include "ui/base/l10n/l10n_util.h" | 20 #include "ui/base/l10n/l10n_util.h" |
20 | 21 |
21 namespace chromeos { | 22 namespace chromeos { |
22 | 23 |
(...skipping 458 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
481 << " contains a token that's neither a string nor a dict."; | 482 << " contains a token that's neither a string nor a dict."; |
482 safe = false; | 483 safe = false; |
483 continue; | 484 continue; |
484 } | 485 } |
485 // Accept whitelisted permissions. | 486 // Accept whitelisted permissions. |
486 if (ArrayContains(kSafePermissionStrings, permission_string)) { | 487 if (ArrayContains(kSafePermissionStrings, permission_string)) { |
487 continue; | 488 continue; |
488 } | 489 } |
489 // Allow arbitrary web requests. Don't include <all_urls> because that | 490 // Allow arbitrary web requests. Don't include <all_urls> because that |
490 // also matches file:// schemes. | 491 // also matches file:// schemes. |
491 if (permission_string.find("https://") == 0 || | 492 if (base::StartsWith(permission_string, "https://", |
492 permission_string.find("http://") == 0 || | 493 base::CompareCase::SENSITIVE) || |
493 permission_string.find("ftp://") == 0) { | 494 base::StartsWith(permission_string, "http://", |
| 495 base::CompareCase::SENSITIVE) || |
| 496 base::StartsWith(permission_string, "ftp://", |
| 497 base::CompareCase::SENSITIVE)) { |
494 continue; | 498 continue; |
495 } | 499 } |
496 LOG(ERROR) << extension->id() | 500 LOG(ERROR) << extension->id() |
497 << " requested non-whitelisted permission: " | 501 << " requested non-whitelisted permission: " |
498 << permission_string; | 502 << permission_string; |
499 safe = false; | 503 safe = false; |
500 } | 504 } |
501 // "app" may only contain "background". | 505 // "app" may only contain "background". |
502 } else if (it.key() == emk::kApp) { | 506 } else if (it.key() == emk::kApp) { |
503 const base::DictionaryValue *dict_value; | 507 const base::DictionaryValue *dict_value; |
(...skipping 109 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
613 if (error) { | 617 if (error) { |
614 *error = l10n_util::GetStringFUTF16( | 618 *error = l10n_util::GetStringFUTF16( |
615 IDS_EXTENSION_CANT_INSTALL_IN_DEVICE_LOCAL_ACCOUNT, | 619 IDS_EXTENSION_CANT_INSTALL_IN_DEVICE_LOCAL_ACCOUNT, |
616 base::UTF8ToUTF16(extension->name()), | 620 base::UTF8ToUTF16(extension->name()), |
617 base::UTF8ToUTF16(extension->id())); | 621 base::UTF8ToUTF16(extension->id())); |
618 } | 622 } |
619 return false; | 623 return false; |
620 } | 624 } |
621 | 625 |
622 } // namespace chromeos | 626 } // namespace chromeos |
OLD | NEW |