PS - Remove Clipboard Read permission from extensions in Public Sessions (except for whitelisted on…

chrome/browser/extensions/scripting_permissions_modifier.h

 // Copyright 2015 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CHROME_BROWSER_EXTENSIONS_SCRIPTING_PERMISSIONS_MODIFIER_H_
 #define CHROME_BROWSER_EXTENSIONS_SCRIPTING_PERMISSIONS_MODIFIER_H_
 
 #include <memory>
 #include <string>
 
@@ skipping 70 matching lines @@
   // permissions that can be granted, and |withheld_permissions_out| with the
   // set of all withheld permissions.
   // If |use_initial_state| is true, this will treat the extension as though it
   // was just installed, not taking into account extra granted preferences.
   void WithholdPermissions(
       const PermissionSet& permissions,
       std::unique_ptr<const PermissionSet>* granted_permissions_out,
       std::unique_ptr<const PermissionSet>* withheld_permissions_out,
       bool use_initial_state);
 
+#if defined(OS_CHROMEOS)
+  // Revokes kClipboardRead permission (used in Public Sessions to secure
+  // clipboard read functionality).
+  void WithholdClipboardRead();

[Devlin, 2017/04/03 20:39:20]

This isn't a script permission, so doesn't really belong here. :)  See other
comment in permissions updater for an alternative suggestion.

+#endif
+
  private:
   // Grants any withheld all-hosts (or all-hosts-like) permissions.
   void GrantWithheldImpliedAllHosts();
 
   // Revokes any granted all-hosts (or all-hosts-like) permissions.
   void WithholdImpliedAllHosts();
 
   // Updates extension prefs in the case of improper values being found for
   // an extension.
   void CleanUpPrefsIfNecessary();
 
   content::BrowserContext* browser_context_;
 
   scoped_refptr<const Extension> extension_;
 
   ExtensionPrefs* extension_prefs_;
 
   DISALLOW_COPY_AND_ASSIGN(ScriptingPermissionsModifier);
 };
 
 }  // namespace extensions
 
 #endif  // CHROME_BROWSER_EXTENSIONS_SCRIPTING_PERMISSIONS_MODIFIER_H_