Create --disable-extensions-except switch

chrome/browser/extensions/extension_service.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CHROME_BROWSER_EXTENSIONS_EXTENSION_SERVICE_H_
 #define CHROME_BROWSER_EXTENSIONS_EXTENSION_SERVICE_H_
 
 #include <map>
 #include <set>
 #include <string>
@@ skipping 438 matching lines @@
     browser_terminating_ = value;
   }
 
   // Set a callback to be called when all external providers are ready and their
   // extensions have been installed.
   void set_external_updates_finished_callback_for_test(
       const base::Closure& callback) {
     external_updates_finished_callback_ = callback;
   }
 
+  void AddExtensionToWhitelist(const std::string& extensionId) {

[Devlin, 2016/07/27 17:00:59]

"Whitelist" here is still pretty vague.  But this might be moot with other
comments.

[catmullings, 2016/08/04 22:59:30]

Done.

+    enabled_extensions_whitelist_.insert(extensionId);
+  }
+
+  bool IsExtensionWhitelisted(const std::string& extensionId) {
+    return enabled_extensions_whitelist_.find(extensionId) !=
+           enabled_extensions_whitelist_.end();
+  }
+
  private:
   // Reloads the specified extension, sending the onLaunched() event to it if it
   // currently has any window showing. |be_noisy| determines whether noisy
   // failures are allowed for unpacked extension installs.
   void ReloadExtensionImpl(const std::string& extension_id, bool be_noisy);
 
   // content::NotificationObserver implementation:
   void Observe(int type,
                const content::NotificationSource& source,
                const content::NotificationDetails& details) override;
@@ skipping 140 matching lines @@
   extensions::ExtensionRegistry* registry_ = nullptr;
 
   // Set of greylisted extensions. These extensions are disabled if they are
   // already installed in Chromium at the time when they are added to
   // the greylist. Unlike blacklisted extensions, greylisted ones are visible
   // to the user and if user re-enables such an extension, they remain enabled.
   //
   // These extensions should appear in registry_.
   extensions::ExtensionSet greylist_;
 
+  // Set of whitelisted enabled extensions loaded from the
+  // --disable-extensions-except command line flag.
+  std::set<std::string> enabled_extensions_whitelist_;
+
   // The list of extension installs delayed for various reasons.  The reason
   // for delayed install is stored in ExtensionPrefs. These are not part of
   // ExtensionRegistry because they are not yet installed.
   extensions::ExtensionSet delayed_installs_;
 
   // Hold the set of pending extensions.
   extensions::PendingExtensionManager pending_extension_manager_;
 
   // The full path to the directory where extensions are installed.
   base::FilePath install_directory_;
@@ skipping 110 matching lines @@
                            GreylistUnknownDontChange);
   FRIEND_TEST_ALL_PREFIXES(ExtensionServiceTest,
                            ManagementPolicyProhibitsEnableOnInstalled);
   FRIEND_TEST_ALL_PREFIXES(ExtensionServiceTest,
                            BlockAndUnblockBlacklistedExtension);
 
   DISALLOW_COPY_AND_ASSIGN(ExtensionService);
 };
 
 #endif  // CHROME_BROWSER_EXTENSIONS_EXTENSION_SERVICE_H_