PS - Remove Clipboard Read permission from extensions in Public Sessions (except for whitelisted on…

chrome/browser/chromeos/extensions/device_local_account_management_policy_provider_unittest.cc

Index: chrome/browser/chromeos/extensions/device_local_account_management_policy_provider_unittest.cc
diff --git a/chrome/browser/chromeos/extensions/device_local_account_management_policy_provider_unittest.cc b/chrome/browser/chromeos/extensions/device_local_account_management_policy_provider_unittest.cc
index c864360d5af12e7195088083f19bfc79940a4fc9..2eaa6dc8e0193448118680f2f75808b10036f1eb 100644
--- a/chrome/browser/chromeos/extensions/device_local_account_management_policy_provider_unittest.cc
+++ b/chrome/browser/chromeos/extensions/device_local_account_management_policy_provider_unittest.cc
@@ -22,6 +22,7 @@ namespace chromeos {
 namespace {
 
 const char kWhitelistedId[] = "cbkkbcmdlboombapidmoeolnmdacpkch";
+const char kBogusId[] = "bogus";
 
 scoped_refptr<const extensions::Extension> CreateExtensionFromValues(
     const std::string& id,
@@ -611,4 +612,16 @@ TEST(DeviceLocalAccountManagementPolicyProviderTest, KioskAppSession) {
   error.clear();
 }
 
+TEST(DeviceLocalAccountManagementPolicyProviderTest, IsWhitelisted) {
+  // Whitelisted extension, Chrome Remote Desktop.
+  auto extension = CreateRegularExtension(kWhitelistedId);
+  EXPECT_TRUE(DeviceLocalAccountManagementPolicyProvider::IsWhitelisted(
+      extension.get()));
+
+  // Bogus extension ID (never true).
+  extension = CreateRegularExtension(kBogusId);
+  EXPECT_FALSE(DeviceLocalAccountManagementPolicyProvider::IsWhitelisted(
+      extension.get()));
+}
+
 }  // namespace chromeos