PS - Remove Clipboard Read permission from extensions in Public Sessions (except for whitelisted on…

chrome/browser/extensions/permissions_updater.h

Index: chrome/browser/extensions/permissions_updater.h
diff --git a/chrome/browser/extensions/permissions_updater.h b/chrome/browser/extensions/permissions_updater.h
index e31d52a45b0d00a6e0b902b2727139cf01e13605..249c7048e6b1a4aeba0787efdaa5f4cadcf87bc2 100644
--- a/chrome/browser/extensions/permissions_updater.h
+++ b/chrome/browser/extensions/permissions_updater.h
@@ -24,6 +24,17 @@ class PermissionSet;
 // and notifies interested parties of the changes.
 class PermissionsUpdater {
  public:
+  // Platform specific delegate.
+  class Delegate {
+   public:
+    virtual ~Delegate() {}
+    // Platform specific initialization of |extension|'s permissions (does any
+    // necessary filtering of permissions or similar).
+    virtual void InitializePermissions(
+        const Extension* extension,
+        std::unique_ptr<const PermissionSet>* granted_permissions) = 0;
+  };
+
   enum InitFlag {
     INIT_FLAG_NONE = 0,
     INIT_FLAG_TRANSIENT = 1 << 0,
@@ -39,6 +50,12 @@ class PermissionsUpdater {
                      InitFlag init_flag);
   ~PermissionsUpdater();
 
+  // Sets a delegate to provide platform-specific logic. This should be set
+  // during startup (to ensure all extensions are initialized through the
+  // delegate).
+  // |delegate| is a singleton instance and is leaked.
+  static void SetPlatformDelegate(Delegate* delegate);
+
   // Adds the set of |permissions| to the |extension|'s active permission set
   // and sends the relevant messages and notifications. This method assumes the
   // user has already been prompted, if necessary, for the extra permissions.