PS - Remove Clipboard Read permission from extensions in Public Sessions (except for whitelisted on…

chrome/browser/chromeos/extensions/device_local_account_management_policy_provider_unittest.cc

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/chromeos/extensions/device_local_account_management_policy_provider.h"
 
 #include <string>
 #include <utility>
 
 #include "base/files/file_path.h"
 #include "base/memory/ptr_util.h"
 #include "base/memory/ref_counted.h"
 #include "base/strings/string16.h"
 #include "base/values.h"
 #include "extensions/common/extension.h"
 #include "extensions/common/manifest.h"
 #include "extensions/common/manifest_constants.h"
 #include "testing/gtest/include/gtest/gtest.h"
 
 namespace chromeos {
 
 namespace {
 
 const char kWhitelistedId[] = "cbkkbcmdlboombapidmoeolnmdacpkch";
+const char kBogusId[] = "bogus";
 
 scoped_refptr<const extensions::Extension> CreateExtensionFromValues(
     const std::string& id,
     extensions::Manifest::Location location,
     base::DictionaryValue* values,
     int flags) {
   values->SetString(extensions::manifest_keys::kName, "test");
   values->SetString(extensions::manifest_keys::kVersion, "0.1");
   std::string error;
   return extensions::Extension::Create(base::FilePath(),
@@ skipping 569 matching lines @@
   // Verify that an extension whose ID has been whitelisted for use in other
   // types of device-local accounts cannot be installed in a single-app kiosk
   // session.
   extension = CreateRegularExtension(kWhitelistedId);
   ASSERT_TRUE(extension.get());
   EXPECT_TRUE(provider.UserMayLoad(extension.get(), &error));
   EXPECT_EQ(base::string16(), error);
   error.clear();
 }
 
+TEST(DeviceLocalAccountManagementPolicyProviderTest, IsWhitelisted) {
+  // Whitelisted extension, Chrome Remote Desktop.
+  auto extension = CreateRegularExtension(kWhitelistedId);
+  EXPECT_TRUE(DeviceLocalAccountManagementPolicyProvider::IsWhitelisted(
+      extension.get()));
+
+  // Bogus extension ID (never true).
+  extension = CreateRegularExtension(kBogusId);
+  EXPECT_FALSE(DeviceLocalAccountManagementPolicyProvider::IsWhitelisted(
+      extension.get()));
+}
+
 }  // namespace chromeos