PS - Remove Clipboard Read permission from extensions in Public Sessions (except for whitelisted on…

chrome/browser/extensions/scripting_permissions_modifier.cc

 // Copyright 2015 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/extensions/scripting_permissions_modifier.h"
 
 #include "base/memory/ptr_util.h"
 #include "chrome/browser/extensions/extension_sync_service.h"
 #include "chrome/browser/extensions/permissions_updater.h"
 #include "extensions/browser/extension_prefs.h"
@@ skipping 259 matching lines @@
                             &withheld_scriptable_hosts);
 
   granted_permissions_out->reset(
       new PermissionSet(permissions.apis(), permissions.manifest_permissions(),
                         granted_explicit_hosts, granted_scriptable_hosts));
   withheld_permissions_out->reset(
       new PermissionSet(APIPermissionSet(), ManifestPermissionSet(),
                         withheld_explicit_hosts, withheld_scriptable_hosts));
 }
 
+#if defined(OS_CHROMEOS)
+void ScriptingPermissionsModifier::WithholdClipboardRead() {
+  APIPermissionSet api_permission_set;
+  api_permission_set.insert(APIPermission::kClipboardRead);
+  PermissionSet permissions(api_permission_set, ManifestPermissionSet(),
+                            URLPatternSet(), URLPatternSet());
+  PermissionsUpdater(browser_context_)
+      .RemovePermissionsUnsafe(extension_.get(), permissions);
+}
+#endif
+
 void ScriptingPermissionsModifier::GrantWithheldImpliedAllHosts() {
   const PermissionSet& withheld =
       extension_->permissions_data()->withheld_permissions();
 
   PermissionSet permissions(
       APIPermissionSet(), ManifestPermissionSet(),
       FilterImpliedAllHostsPatterns(withheld.explicit_hosts()),
       FilterImpliedAllHostsPatterns(withheld.scriptable_hosts()));
   PermissionsUpdater(browser_context_)
       .AddPermissions(extension_.get(), permissions);
@@ skipping 19 matching lines @@
   // TODO(devlin): Remove this in M56.
   DCHECK(ExtensionMustBeAllowedOnAllUrls(*extension_));
   extension_prefs_->UpdateExtensionPref(extension_->id(),
                                         kExtensionAllowedOnAllUrlsPrefName,
                                         base::MakeUnique<base::Value>(true));
   extension_prefs_->UpdateExtensionPref(
       extension_->id(), kHasSetScriptOnAllUrlsPrefName, nullptr);
 }
 
 }  // namespace extensions