Communicate ExtensionSettings policy to renderers

chrome/browser/extensions/permissions_updater.h

Index: chrome/browser/extensions/permissions_updater.h
diff --git a/chrome/browser/extensions/permissions_updater.h b/chrome/browser/extensions/permissions_updater.h
index 2bb6f8fe2f9d62149afdbffad1b3e4e0f051ed2d..038a356ad66faf1b93d91d6bccc3d10c49ebb93f 100644
--- a/chrome/browser/extensions/permissions_updater.h
+++ b/chrome/browser/extensions/permissions_updater.h
@@ -9,6 +9,7 @@
 #include <string>
 
 #include "base/macros.h"
+#include "base/memory/shared_memory.h"
 #include "extensions/browser/extension_event_histogram_value.h"
 
 namespace base {
@@ -24,6 +25,7 @@ namespace extensions {
 class Extension;
 class ExtensionPrefs;
 class PermissionSet;
+class URLPatternSet;
 
 // Updates an Extension's active and granted permissions in persistent storage
 // and notifies interested parties of the changes.
@@ -69,6 +71,21 @@ class PermissionsUpdater {
   void RemovePermissionsUnsafe(const Extension* extension,
                                const PermissionSet& permissions);
 
+  // Sets list of hosts |extension| may not interact with (overrides default).
+  // This is the individual scope of ExtensionSettings.
+  void SetRuntimeBlockedAllowedHosts(const Extension* extension,

[Devlin, 2017/01/09 23:30:57]

RuntimeBlockedAllowedHosts makes no sense to me :)  Is this blocked hosts? 
Allowed hosts?  Hosts that were allowed and now blocked?  Blocked and now
allowed?  A weird combinative state?

[nrpeter, 2017/01/10 17:48:05]

This function updates the list of hosts to be blocked (runtime_blocked_hosts)
and the list of exceptions (runtime_allowed_hosts). Since they're only ever
updated at the same time I didn't think it made sense to split this into two
functions. I'm happy to change the name, maybe something like
SetRuntimeHostPolicy?

+                                     const URLPatternSet& runtime_blocked_hosts,
+                                     const URLPatternSet& runtime_allowed_hosts,
+                                     bool is_default);
+
+  // Sets list of hosts extensions may not interact with. Extension specific
+  // exceptions to this default policy are defined with
+  // SetRuntimeBlockedAllowedHosts. This is the Deault scope "*" of
+  // ExtensionSettings.
+  void SetDefaultRuntimeBlockedAllowedHosts(
+      const URLPatternSet& default_runtime_blocked_hosts,
+      const URLPatternSet& default_runtime_allowed_hosts);
+
   // Returns the set of revokable permissions.
   std::unique_ptr<const PermissionSet> GetRevokablePermissions(
       const Extension* extension) const;
@@ -111,6 +128,24 @@ class PermissionsUpdater {
                                 const Extension* extension,
                                 const PermissionSet& changed);
 
+  // Issues the relevant events, messages and notifications when the
+  // |extension|'s management policy have changed.
+  // Specifically, this sends the EXTENSION_POLICY_UPDATED notification,
+  // the ExtensionMsg_UpdateAllowedAndBlockedHosts IPC message.
+  void NotifyRuntimeBlockedAllowedHostsUpdated(
+      const Extension* extension,
+      const URLPatternSet& runtime_blocked_hosts,
+      const URLPatternSet& runtime_allowed_hosts,
+      bool is_default);
+
+  // Issues the relevant events, messages and notifications when the
+  // |extension|'s management policy have changed.
+  // Specifically, this sends the EXTENSION_POLICY_UPDATED notification,
+  // the ExtensionMsg_UpdateDefaultAllowedAndBlockedHostsPolicy IPC message.
+  void NotifyDefaultRuntimeBlockedAllowedHostsUpdated(
+      const URLPatternSet& default_runtime_blocked_hosts,
+      const URLPatternSet& default_runtime_allowed_hosts);
+
   // The associated BrowserContext.
   content::BrowserContext* browser_context_;