[Chrome OS ECHO]: Move to manifest version 2, and enable CSP

chrome/browser/resources/chromeos/echo/manifest.json

 {
   // chrome-extension://dfgpjpjbeeflfdhdpabeeeheghdmeigc
   "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCzzB6c4Z0cusW6trA/issIOyMaxXtPfMYQclO0Dg5rOrS8SZLOAio0G4TpYDvY8z/BPdAH3a1BOSeetey8tBSdcIhOoYpqN3i9yIFuZVwHuOt83AWnJrxinVUpY05HtTblopGvGtQNlCR5crMdG+uc2yI3NlPOFZVDrFXtOv/LXQIDAQAB",
   "name": "Chrome OS ECHO Extension",
   "version": "0.0.2",
   "description": "Chrome OS ECHO Extension",
-  // TODO(gauravsh): Move to manifest version 2, get rid of https://www-googleapis-test.sandbox.google.com once
-  //                 production service is up and running. crosbug.com/28353
-  "manifest_version": 1,
-  "content_security_policy": "default-src 'self'; script-src 'self' 'unsafe-eval' https://apis.google.com; frame-src 'self' https://www.googleapis.com https://www-googleapis-test.sandbox.google.com; object-src 'self'",
+  // TODO(gauravsh): Get rid of https://www-googleapis-test.sandbox.google.com once
+  //                 production service is up and running. crosbug.com/29809
+  "manifest_version": 2,
+  "content_security_policy": "default-src 'self'; script-src 'self' https://apis.google.com; frame-src 'self' https://www.googleapis.com https://www-googleapis-test.sandbox.google.com; object-src 'self'",

[Jorge Lucangeli Obes, 2012/04/20 22:15:03]

You should be able to get rid of "object-src 'self'" since it's implied by
"default-src 'self'".

[gauravsh, 2012/04/20 22:19:13]

Done.

   "permissions": [
       "cookies",
       "echoPrivate",
       "https://*/*"
    ],
   "web_accessible_resources": [
     "main.html",
     "main.js"
   ],
   "intents": {
     "https://crosecho.com/startEcho": [{
       "type" : ["application/vnd.chromeos.echo"],
       "title" : "Initiate Chrome OS ECHO",
       "path" : "main.html",
       "disposition" : "inline"
     }]
   }
 }