PS - Remove Clipboard Read permission from extensions in Public Sessions (except for whitelisted on…

chrome/browser/extensions/permissions_updater.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/extensions/permissions_updater.h"
 
 #include <utility>
 
 #include "base/memory/ref_counted.h"
 #include "base/values.h"
@@ skipping 51 matching lines @@
       PermissionSet::CreateIntersection(*total_permissions,
                                         *active_permissions);
 
   // Make sure the active permissions contain the default permissions.
   adjusted_active =
       PermissionSet::CreateUnion(required_permissions, *adjusted_active);
 
   return adjusted_active;
 }
 
+PermissionsUpdater::Delegate* g_delegate = nullptr;
+
 }  // namespace
 
 PermissionsUpdater::PermissionsUpdater(content::BrowserContext* browser_context)
     : browser_context_(browser_context), init_flag_(INIT_FLAG_NONE) {
 }
 
 PermissionsUpdater::PermissionsUpdater(content::BrowserContext* browser_context,
                                        InitFlag init_flag)
     : browser_context_(browser_context), init_flag_(init_flag) {
 }
 
 PermissionsUpdater::~PermissionsUpdater() {}
 
+// static
+void PermissionsUpdater::SetPlatformDelegate(Delegate* delegate) {
+  g_delegate = delegate;

[Andrew T Wilson (Slow), 2017/04/11 11:32:54]

I think we should CHECK(!g_delegate) here to make sure we never set a delegate
multiple times.

[Ivan Šandrk, 2017/04/11 13:37:27]

Done.

+}
+
 void PermissionsUpdater::AddPermissions(const Extension* extension,
                                         const PermissionSet& permissions) {
   const PermissionSet& active =
       extension->permissions_data()->active_permissions();
   std::unique_ptr<const PermissionSet> total =
       PermissionSet::CreateUnion(active, permissions);
   std::unique_ptr<const PermissionSet> added =
       PermissionSet::CreateDifference(*total, active);
 
   std::unique_ptr<const PermissionSet> new_withheld =
@@ skipping 95 matching lines @@
     bounded_active = bounded_wrapper.get();
   }
 
   std::unique_ptr<const PermissionSet> granted_permissions;
   std::unique_ptr<const PermissionSet> withheld_permissions;
   ScriptingPermissionsModifier(browser_context_, make_scoped_refptr(extension))
       .WithholdPermissions(*bounded_active, &granted_permissions,
                            &withheld_permissions,
                            (init_flag_ & INIT_FLAG_TRANSIENT) != 0);
 
+  if (g_delegate)
+    g_delegate->InitializePermissions(extension, &granted_permissions);
+
   SetPermissions(extension, std::move(granted_permissions),
                  std::move(withheld_permissions));
 }
 
 void PermissionsUpdater::SetPermissions(
     const Extension* extension,
     std::unique_ptr<const PermissionSet> active,
     std::unique_ptr<const PermissionSet> withheld) {
   DCHECK(active);
   const PermissionSet& active_weak = *active;
@@ skipping 26 matching lines @@
   std::unique_ptr<Event> event(
       new Event(histogram_value, event_name, std::move(value)));
   event->restrict_to_browser_context = browser_context_;
   event_router->DispatchEventToExtension(extension_id, std::move(event));
 }
 
 void PermissionsUpdater::NotifyPermissionsUpdated(
     EventType event_type,
     const Extension* extension,
     const PermissionSet& changed) {
-  DCHECK((init_flag_ & INIT_FLAG_TRANSIENT) == 0);
+  DCHECK_EQ(0, init_flag_ & INIT_FLAG_TRANSIENT);
   if (changed.IsEmpty())
     return;
 
   UpdatedExtensionPermissionsInfo::Reason reason;
   events::HistogramValue histogram_value;
   const char* event_name = NULL;
 
   if (event_type == REMOVED) {
     reason = UpdatedExtensionPermissionsInfo::REMOVED;
     histogram_value = events::PERMISSIONS_ON_REMOVED;
@@ skipping 29 matching lines @@
             Profile::FromBrowserContext(host->GetBrowserContext()))) {
       host->Send(new ExtensionMsg_UpdatePermissions(params));
     }
   }
 
   // Trigger the onAdded and onRemoved events in the extension.
   DispatchEvent(extension->id(), histogram_value, event_name, changed);
 }
 
 }  // namespace extensions