Add policy for fullscreen mode; disallow fullscreen in public sessions

chrome/browser/ui/fullscreen/fullscreen_controller.cc

Index: chrome/browser/ui/fullscreen/fullscreen_controller.cc
diff --git a/chrome/browser/ui/fullscreen/fullscreen_controller.cc b/chrome/browser/ui/fullscreen/fullscreen_controller.cc
index 7c1621e0a32673e73d50ff51c71ef71a61af55d4..7fc8da75b87b3d97e7d38003e5a08726a5a97f4e 100644
--- a/chrome/browser/ui/fullscreen/fullscreen_controller.cc
+++ b/chrome/browser/ui/fullscreen/fullscreen_controller.cc
@@ -28,6 +28,9 @@
 
 #if defined(OS_MACOSX)
 #include "base/mac/mac_util.h"
+#else
+#include "base/prefs/pref_service.h"
+#include "chrome/common/pref_names.h"
 #endif
 
 using content::RenderViewHost;
@@ -552,6 +555,14 @@ void FullscreenController::ToggleFullscreenModeInternal(
   if (chrome::IsRunningInAppMode() && window_->IsFullscreen())
     return;
 
+#if !defined(OS_MACOSX)
+  // Do not enter fullscreen mode if disallowed by pref.

[scheib, 2013/08/22 23:57:26]

Have you tested this in combination with kiosk mode? Please add comments here
explaining now they mix (or don't mix). Add explanation elsewhere also (e.g.
when exposing preferences) if they don't mix.

[bartfab (slow), 2013/08/23 11:54:21]

Added documentation here, in pref_names.cc and policy_templates.json.

On desktop platforms, disabling fullscreen makes kiosk mode unavailable. On
Chrome OS, disabling fullscreen has no impact on kiosk mode. (This is because
desktop kiosk mode and Chrome OS kiosk mode are entirely unrelated features that
unfortunately happen to share the same name.)

+  if (enter_fullscreen &&
+      !profile_->GetPrefs()->GetBoolean(prefs::kFullscreenAllowed)) {
+    return;
+  }
+#endif
+
   if (enter_fullscreen)
     EnterFullscreenModeInternal(option);
   else