[Merge to M59] Whitelisted clipboardRead Permission

chrome/browser/chromeos/extensions/device_local_account_management_policy_provider.cc

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/chromeos/extensions/device_local_account_management_policy_provider.h"
 
 #include <stddef.h>
 
 #include <cstddef>
 #include <string>
@@ skipping 415 matching lines @@
 
     // Open a new tab with a given URL.
     "browser",
 
     // This allows to read the current browsing data removal dialog settings,
     // but I don't see why this would be problematic.
     "browsingData",
 
     "certificateProvider",
 
-    // This is risky, but blocking extensions just because they declare
-    // clipboardRead is unfortunate. Options: (1) Make clipboardRead return
-    // empty string (2) confirmation dialog.
-    // "clipboardRead",
+    // clipboardRead is restricted to return an empty string (except for
+    // whitelisted extensions - ie. Chrome RDP client).
+    "clipboardRead",
 
     // Writing to clipboard is safe.
     "clipboardWrite",
 
     "contentSettings",
 
     // Privacy sensitive URL access.
     // "contextMenus",
 
     // This would provie access to auth cookies, so needs to be blocked.
@@ skipping 496 matching lines @@
   if (error) {
     *error = l10n_util::GetStringFUTF16(
           IDS_EXTENSION_CANT_INSTALL_IN_DEVICE_LOCAL_ACCOUNT,
           base::UTF8ToUTF16(extension->name()),
           base::UTF8ToUTF16(extension->id()));
   }
   return false;
 }
 
 }  // namespace chromeos