Index: chrome/browser/chromeos/extensions/device_local_account_management_policy_provider.cc |
diff --git a/chrome/browser/chromeos/extensions/device_local_account_management_policy_provider.cc b/chrome/browser/chromeos/extensions/device_local_account_management_policy_provider.cc |
index dd2975c225ea9cc92e74998f65a0bf15bea821e9..d35ec8a0da585f21422fd3e841c3da7a583a4145 100644 |
--- a/chrome/browser/chromeos/extensions/device_local_account_management_policy_provider.cc |
+++ b/chrome/browser/chromeos/extensions/device_local_account_management_policy_provider.cc |
@@ -437,8 +437,8 @@ const char* const kSafePermissionStrings[] = { |
"contentSettings", |
- // Provides access to URLs. |
- "contextMenus", |
+ // Privacy sensitive URL access. |
+ // "contextMenus", |
// This would provie access to auth cookies, so needs to be blocked. |
// "cookies", |
@@ -512,8 +512,8 @@ const char* const kSafePermissionStrings[] = { |
// However, keyboards and mice are apparently not surfaced via this API. |
"hid", |
- // Just URLs and meta data. |
- "history", |
+ // Privacy sensitive URL access. |
+ // "history", |
// Not really useful as there's no signed-in user, so OK to allow. |
"identity", |
@@ -598,8 +598,8 @@ const char* const kSafePermissionStrings[] = { |
// that serial input devices are exceedingly rare, OK to allow. |
"serial", |
- // Access to URLs. |
- "sessions", |
+ // Privacy sensitive URL access. |
+ // "sessions", |
"socket", |
@@ -629,11 +629,11 @@ const char* const kSafePermissionStrings[] = { |
// for user consent or (2) return blank capture. |
// "tabCapture", |
- // URLs and page titles. |
- "tabs", |
+ // Privacy sensitive URL access. |
+ // "tabs", |
- // URLs and page titles. |
- "topSites", |
+ // Privacy sensitive URL access. |
+ // "topSites", |
// Allows to generate TTS, but no content access. Just UX. |
"tts", |
@@ -660,8 +660,8 @@ const char* const kSafePermissionStrings[] = { |
// Just UX. |
"wallpaper", |
- // Access to URLs. |
- "webNavigation", |
+ // Privacy sensitive URL access. |
+ // "webNavigation", |
// Provides access to cookies and form upload data. Options: (1) block, |
// (2) strip all content in events. |