Whitelisted tabs permission

chrome/browser/chromeos/extensions/device_local_account_management_policy_provider.cc

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/chromeos/extensions/device_local_account_management_policy_provider.h"
 
 #include <stddef.h>
 
 #include <cstddef>
 #include <string>
@@ skipping 619 matching lines @@
     // Enumerates network interfaces.
     "system.network",
 
     // Enumerates removable storage.
     "system.storage",
 
     // User is prompted (allow/deny) when an extension requests tabCapture. The
     // request is made via chrome.tabCapture.capture call.
     "tabCapture",
 
-    // Privacy sensitive URL access.
-    // "tabs",
+    // The URL returned by chrome.tabs API is scrubbed down to the origin.
+    "tabs",
 
     // Privacy sensitive URL access.
     // "topSites",
 
     // Allows to generate TTS, but no content access. Just UX.
     "tts",
 
     // Might need this, but has content access. Manual whitelisting?
     // "ttsEngine",
 
@@ skipping 294 matching lines @@
   if (error) {
     *error = l10n_util::GetStringFUTF16(
           IDS_EXTENSION_CANT_INSTALL_IN_DEVICE_LOCAL_ACCOUNT,
           base::UTF8ToUTF16(extension->name()),
           base::UTF8ToUTF16(extension->id()));
   }
   return false;
 }
 
 }  // namespace chromeos