PS - Remove Clipboard Read permission from extensions in Public Sessions (except for whitelisted on…

chrome/browser/chromeos/extensions/device_local_account_management_policy_provider.h

Index: chrome/browser/chromeos/extensions/device_local_account_management_policy_provider.h
diff --git a/chrome/browser/chromeos/extensions/device_local_account_management_policy_provider.h b/chrome/browser/chromeos/extensions/device_local_account_management_policy_provider.h
index 0704467316204f7909500f08b957710ec00b31c8..9eb82c8ff1009b2930a6dfe39f094f58caeab8f0 100644
--- a/chrome/browser/chromeos/extensions/device_local_account_management_policy_provider.h
+++ b/chrome/browser/chromeos/extensions/device_local_account_management_policy_provider.h
@@ -5,6 +5,8 @@
 #ifndef CHROME_BROWSER_CHROMEOS_EXTENSIONS_DEVICE_LOCAL_ACCOUNT_MANAGEMENT_POLICY_PROVIDER_H_
 #define CHROME_BROWSER_CHROMEOS_EXTENSIONS_DEVICE_LOCAL_ACCOUNT_MANAGEMENT_POLICY_PROVIDER_H_
 
+#include <string>
+
 #include "base/compiler_specific.h"
 #include "base/macros.h"
 #include "chrome/browser/chromeos/policy/device_local_account.h"
@@ -22,6 +24,9 @@ class DeviceLocalAccountManagementPolicyProvider
       policy::DeviceLocalAccount::Type account_type);
   ~DeviceLocalAccountManagementPolicyProvider() override;
 
+  // Used to check whether an extension is explicitly whitelisted.
+  static bool IsWhitelisted(const extensions::Extension* extension);
+
   // extensions::ManagementPolicy::Provider:
   std::string GetDebugPolicyProviderName() const override;
   bool UserMayLoad(const extensions::Extension* extension,