[Chrome OS ECHO]: Move to manifest version 2, and enable CSP

chrome/browser/resources/chromeos/echo/manifest.json

Index: chrome/browser/resources/chromeos/echo/manifest.json
diff --git a/chrome/browser/resources/chromeos/echo/manifest.json b/chrome/browser/resources/chromeos/echo/manifest.json
index 8f45c4487b7dbd46494565e12744d3ffcb2f35b8..baba2fa0c4c6222664c68f6bc7a5f49e9468ebbb 100644
--- a/chrome/browser/resources/chromeos/echo/manifest.json
+++ b/chrome/browser/resources/chromeos/echo/manifest.json
@@ -4,10 +4,10 @@
   "name": "Chrome OS ECHO Extension",
   "version": "0.0.2",
   "description": "Chrome OS ECHO Extension",
-  // TODO(gauravsh): Move to manifest version 2, get rid of https://www-googleapis-test.sandbox.google.com once
-  //                 production service is up and running. crosbug.com/28353
-  "manifest_version": 1,
-  "content_security_policy": "default-src 'self'; script-src 'self' 'unsafe-eval' https://apis.google.com; frame-src 'self' https://www.googleapis.com https://www-googleapis-test.sandbox.google.com; object-src 'self'",
+  // TODO(gauravsh): Get rid of https://www-googleapis-test.sandbox.google.com once
+  //                 production service is up and running. crosbug.com/29809
+  "manifest_version": 2,
+  "content_security_policy": "default-src 'self'; script-src 'self' https://apis.google.com; frame-src 'self' https://www.googleapis.com https://www-googleapis-test.sandbox.google.com; object-src 'self'",

[Jorge Lucangeli Obes, 2012/04/20 22:15:03]

You should be able to get rid of "object-src 'self'" since it's implied by
"default-src 'self'".

[gauravsh, 2012/04/20 22:19:13]

Done.

   "permissions": [
       "cookies",
       "echoPrivate",