1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
|
// Copyright 2013 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#ifndef CHROME_BROWSER_EXTENSIONS_POLICY_HANDLERS_H_
#define CHROME_BROWSER_EXTENSIONS_POLICY_HANDLERS_H_
#include <optional>
#include "base/values.h"
#include "build/build_config.h"
#include "components/policy/core/browser/configuration_policy_handler.h"
namespace policy {
class PolicyMap;
class PolicyErrorMap;
class Schema;
} // namespace policy
namespace extensions {
// Implements additional checks for policies that are lists of extension IDs.
class ExtensionListPolicyHandler : public policy::ListPolicyHandler {
public:
ExtensionListPolicyHandler(const char* policy_name,
const char* pref_path,
bool allow_wildcards);
ExtensionListPolicyHandler(const ExtensionListPolicyHandler&) = delete;
ExtensionListPolicyHandler& operator=(const ExtensionListPolicyHandler&) =
delete;
~ExtensionListPolicyHandler() override;
protected:
// ListPolicyHandler methods:
// Checks whether `value` contains a valid extension id (or a wildcard).
bool CheckListEntry(const base::Value& value) override;
// Sets `prefs` at pref_path() to `filtered_list`.
void ApplyList(base::Value::List filtered_list, PrefValueMap* prefs) override;
private:
const char* pref_path_;
bool allow_wildcards_;
};
// Class for parsing the list of extensions to force install.
//
// On ChromeOS the policy values will be filtered before updating the prefs,
// such that the prefs on Ash only contain the extensions that must be force
// installed on Ash.
class ExtensionInstallForceListPolicyHandler
: public policy::TypeCheckingPolicyHandler {
public:
ExtensionInstallForceListPolicyHandler();
ExtensionInstallForceListPolicyHandler(
const ExtensionInstallForceListPolicyHandler&) = delete;
ExtensionInstallForceListPolicyHandler& operator=(
const ExtensionInstallForceListPolicyHandler&) = delete;
~ExtensionInstallForceListPolicyHandler() override = default;
// ConfigurationPolicyHandler methods:
bool CheckPolicySettings(const policy::PolicyMap& policies,
policy::PolicyErrorMap* errors) override;
void ApplyPolicySettings(const policy::PolicyMap& policies,
PrefValueMap* prefs) override;
// Returns a `base::Value::Dict` with the extensions that must be force
// installed.
//
// Returns nullopt if the policy is unset.
std::optional<base::Value::Dict> GetPolicyDict(
const policy::PolicyMap& policy_map);
private:
// Parses the data in `policy_value` and writes them to `extension_dict`.
bool ParseList(const base::Value* policy_value,
base::Value::Dict* extension_dict,
policy::PolicyErrorMap* errors);
};
// Class for parsing the list of extensions that are blocklisted.
class ExtensionInstallBlockListPolicyHandler
: public policy::ConfigurationPolicyHandler {
public:
ExtensionInstallBlockListPolicyHandler();
ExtensionInstallBlockListPolicyHandler(
const ExtensionInstallBlockListPolicyHandler&) = delete;
ExtensionInstallBlockListPolicyHandler& operator=(
const ExtensionInstallBlockListPolicyHandler&) = delete;
~ExtensionInstallBlockListPolicyHandler() override;
// `ConfigurationPolicyHandler`:
bool CheckPolicySettings(const policy::PolicyMap& policies,
policy::PolicyErrorMap* errors) override;
void ApplyPolicySettings(const policy::PolicyMap& policies,
PrefValueMap* prefs) override;
private:
ExtensionListPolicyHandler list_handler_;
};
#if !BUILDFLAG(IS_ANDROID)
// Implements additional checks for policies that are lists of extension
// URLPatterns.
class ExtensionURLPatternListPolicyHandler
: public policy::TypeCheckingPolicyHandler {
public:
ExtensionURLPatternListPolicyHandler(const char* policy_name,
const char* pref_path);
ExtensionURLPatternListPolicyHandler(
const ExtensionURLPatternListPolicyHandler&) = delete;
ExtensionURLPatternListPolicyHandler& operator=(
const ExtensionURLPatternListPolicyHandler&) = delete;
~ExtensionURLPatternListPolicyHandler() override;
// ConfigurationPolicyHandler methods:
bool CheckPolicySettings(const policy::PolicyMap& policies,
policy::PolicyErrorMap* errors) override;
void ApplyPolicySettings(const policy::PolicyMap& policies,
PrefValueMap* prefs) override;
private:
const char* pref_path_;
};
#endif // !BUILDFLAG(IS_ANDROID)
class ExtensionSettingsPolicyHandler
: public policy::SchemaValidatingPolicyHandler {
public:
explicit ExtensionSettingsPolicyHandler(const policy::Schema& chrome_schema);
ExtensionSettingsPolicyHandler(const ExtensionSettingsPolicyHandler&) =
delete;
ExtensionSettingsPolicyHandler& operator=(
const ExtensionSettingsPolicyHandler&) = delete;
~ExtensionSettingsPolicyHandler() override;
// ConfigurationPolicyHandler methods:
bool CheckPolicySettings(const policy::PolicyMap& policies,
policy::PolicyErrorMap* errors) override;
void ApplyPolicySettings(const policy::PolicyMap& policies,
PrefValueMap* prefs) override;
private:
// Performs sanitization for both Check/ApplyPolicySettings(). If an entry
// in `dict_value` doesn't pass validation, that entry is removed from the
// dictionary. Validation errors are stored in `errors` if non-null.
void SanitizePolicySettings(base::Value* dict_value,
policy::PolicyErrorMap* errors);
};
} // namespace extensions
#endif // CHROME_BROWSER_EXTENSIONS_POLICY_HANDLERS_H_
|
