Added arc_metadata manifest entry & fileSystem permission dict

chrome/browser/chromeos/extensions/device_local_account_management_policy_provider.cc

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/chromeos/extensions/device_local_account_management_policy_provider.h"
 
 #include <stddef.h>
 
 #include <cstddef>
 #include <string>
@@ skipping 113 matching lines @@
 };
 
 // List of manifest entries from https://developer.chrome.com/apps/manifest.
 // Unsafe entries are commented out and special cases too.
 const char* const kSafeManifestEntries[] = {
     emk::kAboutPage,
 
     // Special-cased in IsSafeForPublicSession().
     // emk::kApp,
 
+    // Not a real manifest entry (doesn't show up in code search). All legacy
+    // ARC apps have this dictionary (data is stuffed there to be consumed by
+    // the ARC runtime).
+    "arc_metadata",
+
     // Documented in https://developer.chrome.com/extensions/manifest but not
     // implemented anywhere.  Still, a lot of apps use it.
     "author",
 
     // Allows inspection of page contents, not enabled on stable anyways except
     // for whitelist.
     // emk::kAutomation,
 
     "background",
 
@@ skipping 532 matching lines @@
     // server-side or via chrome.socket. Finally, web security doesn't make a
     // lot of sense when there's no URL bar or HTTPS padlock providing trusted
     // UI. Bottom line: Risks are mitigated, further restrictions don't make
     // sense, so OK to allow.
     "webview",
 };
 
 // Some permissions take the form of a dictionary.  See |kSafePermissionStrings|
 // for permission strings (and for more documentation).
 const char* const kSafePermissionDicts[] = {
-    // TBD
-    // "fileSystem",
+    // Dictionary form of the above "fileSystem" permission string.
+    "fileSystem",
 
     // Just another type of connectivity.
     "socket",
 };
 
 // List of safe entries for the "app" dict in manifest.
 const char* const kSafeAppStrings[] = {
     "background",
     "content_security_policy",
     "icon_color",
@@ skipping 236 matching lines @@
   if (error) {
     *error = l10n_util::GetStringFUTF16(
           IDS_EXTENSION_CANT_INSTALL_IN_DEVICE_LOCAL_ACCOUNT,
           base::UTF8ToUTF16(extension->name()),
           base::UTF8ToUTF16(extension->id()));
   }
   return false;
 }
 
 }  // namespace chromeos