1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
|
// Copyright 2020 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#ifndef CHROME_BROWSER_ASH_EXTENSIONS_EXTENSIONS_PERMISSIONS_TRACKER_H_
#define CHROME_BROWSER_ASH_EXTENSIONS_EXTENSIONS_PERMISSIONS_TRACKER_H_
#include "base/memory/raw_ptr.h"
#include "base/scoped_observation.h"
#include "components/prefs/pref_change_registrar.h"
#include "components/prefs/pref_registry_simple.h"
#include "extensions/browser/extension_registry.h"
#include "extensions/browser/extension_registry_observer.h"
#include "extensions/common/extension.h"
namespace content {
class BrowserContext;
}
namespace extensions {
// Returns true if the |extension_id| is allowed in managed guest sessions.
bool IsAllowlistedForManagedGuestSession(const std::string& extension_id);
// Used to track the installation of the force-installed extensions of the
// managed-guest session to decide whether the permissions of the extensions
// should trigger the full warning on the login screen or not. The result is
// saved in the local state perf, and the login screen warning of the managed
// guest session is updated accordingly. ChromeExtensionSystem owns this class
// and outlives it.
class ExtensionsPermissionsTracker : public ExtensionRegistryObserver {
public:
ExtensionsPermissionsTracker(ExtensionRegistry* registry,
content::BrowserContext* browser_context);
ExtensionsPermissionsTracker(const ExtensionsPermissionsTracker&) = delete;
ExtensionsPermissionsTracker& operator=(const ExtensionsPermissionsTracker&) =
delete;
~ExtensionsPermissionsTracker() override;
static void RegisterLocalStatePrefs(PrefRegistrySimple* registry);
// ExtensionRegistryObserver overrides:
void OnExtensionLoaded(content::BrowserContext* browser_context,
const Extension* extension) override;
protected:
virtual bool IsSafePerms(const PermissionsData* perms_data) const;
private:
// Loads list of force-installed extensions if it's available.
void OnForcedExtensionsPrefChanged();
void UpdateLocalState();
void ParseExtensionPermissions(const Extension* extension);
// Unowned, but guaranteed to outlive this object.
raw_ptr<ExtensionRegistry> registry_;
// Unowned, but guaranteed to outlive this object.
raw_ptr<PrefService> pref_service_;
PrefChangeRegistrar pref_change_registrar_;
// // Whether the extension is considered "safe". If any extension is not, it
// will result in the full warning being shown on the login screen.
std::map<ExtensionId, bool> extension_safety_ratings_;
// Set of not yet loaded force installed extensions.
std::set<ExtensionId> pending_forced_extensions_;
base::ScopedObservation<ExtensionRegistry, ExtensionRegistryObserver>
observation_{this};
};
} // namespace extensions
#endif // CHROME_BROWSER_ASH_EXTENSIONS_EXTENSIONS_PERMISSIONS_TRACKER_H_
|
