From 306a2bd6e1bdabbe0cb5a70e17fe9a3eee08b5f9 Mon Sep 17 00:00:00 2001 From: "finnur@chromium.org" <finnur@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> Date: Wed, 11 Aug 2010 14:56:36 +0000 Subject: Implement admin control (by policy) over which extensions the user can install and run. Currently we intercept in two locations: 1) When the user tries to install an extension (includes error message). 2) Every time the browser starts up and the currently installed extensions are loaded (silently skips the extension). I implemented a whitelist and a blacklist approach, calling it a allow/deny list to not clash with the global blacklist we have for extensions. A blacklist of '*' means all extensions are blacklisted. If an extension is on the blacklist it cannot be installed/loaded, unless it also appears on the whitelist. I also fleshed out the LIST_TYPE support for policy values, so that we don't have to use comma separated REG_SZ values for lists and can instead use ADM support for listboxes. BUG=47085 TEST=ExtensionsServiceTest.BlacklistedByPolicyWillNotInstall, ConfigurationPolicyProviderWinTest.TestExtensionInstall* Review URL: http://codereview.chromium.org/3014053 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@55727 0039d316-1c4b-4281-b951-d872f2087c98 --- chrome/common/pref_names.h | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'chrome/common/pref_names.h') diff --git a/chrome/common/pref_names.h b/chrome/common/pref_names.h index 61e87bf..1e20e76 100644 --- a/chrome/common/pref_names.h +++ b/chrome/common/pref_names.h @@ -299,8 +299,8 @@ extern const char kDisableExtensions[]; extern const char kShowExtensionShelf[]; extern const char kBrowserActionContainerWidth[]; -extern const char kLastExtensionsUpdateCheck[]; -extern const char kNextExtensionsUpdateCheck[]; +extern const char kExtensionInstallAllowList[]; +extern const char kExtensionInstallDenyList[]; extern const char kExtensionBlacklistUpdateVersion[]; -- cgit v1.1