These test uses ExtensionManagementPolicyUpdater to update enterprise policy, maybe for testing mock?

I assumed such enterprise policy is reflected in extensions/common/cors_utils.cc, CreateCorsOriginAccessBlockList in the production code, but not sure what I should do for these tests.