Create --disable-extensions-except switch

chrome/browser/extensions/extension_system_impl.cc

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/extensions/extension_system_impl.h"
 
 #include <algorithm>
 
 #include "base/base_switches.h"
 #include "base/bind.h"
@@ skipping 112 matching lines @@
   policy::DeviceLocalAccount::Type device_local_account_type;
   if (user && policy::IsDeviceLocalAccountUser(user->email(),
                                                &device_local_account_type)) {
     device_local_account_management_policy_provider_.reset(
         new chromeos::DeviceLocalAccountManagementPolicyProvider(
             device_local_account_type));
   }
 #endif  // defined(OS_CHROMEOS)
 }
 
+void ExtensionSystemImpl::Shared::LoadExtensionsFromCommandLineFlag(
+    const base::CommandLine* command_line,
+    const char* switch_name) {
+  if (command_line->HasSwitch(switch_name)) {
+    base::CommandLine::StringType path_list =
+        command_line->GetSwitchValueNative(switch_name);
+    base::StringTokenizerT<base::CommandLine::StringType,
+                           base::CommandLine::StringType::const_iterator>
+        t(path_list, FILE_PATH_LITERAL(","));
+    while (t.GetNext()) {
+      std::string extension_id;
+      UnpackedInstaller::Create(extension_service_.get())
+          ->LoadFromCommandLine(base::FilePath(t.token()), &extension_id);
+      if (std::strcmp(switch_name, switches::kDisableExtensionsExcept) == 0) {
+        extension_service_->AddExtensionToWhitelist(extension_id);
+      }
+    }
+  }
+}
+
 void ExtensionSystemImpl::Shared::RegisterManagementPolicyProviders() {
   management_policy_->RegisterProviders(
       ExtensionManagementFactory::GetForBrowserContext(profile_)
           ->GetProviders());
 
 #if defined(OS_CHROMEOS)
   if (device_local_account_management_policy_provider_) {
     management_policy_->RegisterProvider(
         device_local_account_management_policy_provider_.get());
   }
@@ skipping 113 matching lines @@
   extension_service_->Init();
 
   // Make sure ExtensionSyncService is created.
   ExtensionSyncService::Get(profile_);
 
   // Make the chrome://extension-icon/ resource available.
   content::URLDataSource::Add(profile_, new ExtensionIconSource(profile_));
 
   quota_service_.reset(new QuotaService);
 
+  LoadExtensionsFromCommandLineFlag(command_line,
+                                    switches::kDisableExtensionsExcept);
+
   if (extensions_enabled) {
     // Load any extensions specified with --load-extension.
     // TODO(yoz): Seems like this should move into ExtensionService::Init.

[Devlin, 2016/07/27 17:01:00]

I agree with this fairly-ancient TODO.  Can we move extension commandline
loading to ExtensionService::Init()?  That way we also do away with the public
whitelist-affecting methods.

[catmullings, 2016/08/04 22:59:31]

Done.

     // But maybe it's no longer important.
-    if (command_line->HasSwitch(switches::kLoadExtension)) {
-      base::CommandLine::StringType path_list =
-          command_line->GetSwitchValueNative(switches::kLoadExtension);
-      base::StringTokenizerT<base::CommandLine::StringType,
-                             base::CommandLine::StringType::const_iterator>
-          t(path_list, FILE_PATH_LITERAL(","));
-      while (t.GetNext()) {
-        std::string extension_id;
-        UnpackedInstaller::Create(extension_service_.get())->
-            LoadFromCommandLine(base::FilePath(t.token()), &extension_id);
-      }
-    }
+    LoadExtensionsFromCommandLineFlag(command_line, switches::kLoadExtension);
   }
 }
 
 void ExtensionSystemImpl::Shared::Shutdown() {
   if (content_verifier_.get())
     content_verifier_->Shutdown();
   if (extension_service_)
     extension_service_->Shutdown();
 }
 
@@ skipping 174 matching lines @@
 void ExtensionSystemImpl::UnregisterExtensionWithRequestContexts(
     const std::string& extension_id,
     const UnloadedExtensionInfo::Reason reason) {
   BrowserThread::PostTask(
       BrowserThread::IO,
       FROM_HERE,
       base::Bind(&InfoMap::RemoveExtension, info_map(), extension_id, reason));
 }
 
 }  // namespace extensions