[Chromoting] Add wildcard to talkgadget in manifest permissions.

remoting/webapp/manifest.json

 {
   "name": "__MSG_PRODUCT_NAME__",
   "version": "FULL_APP_VERSION",
   "description": "__MSG_PRODUCT_DESCRIPTION__",
   "default_locale": "en",
   "app": {
     "launch": {
       "local_path": "main.html"
     }
   },
   "icons": {
     "128": "chromoting128.png",
     "48": "chromoting48.png",
     "16": "chromoting16.png"
   },
   "content_scripts": [
     {
       "matches": [
         "OAUTH2_REDIRECT_URL"
       ],
       "js": [ "cs_oauth2_trampoline.js" ]
     }
   ],
   "permissions": [
     "https://accounts.google.com/*",
     "https://www.googleapis.com/chromoting/*",
-    "https://talkgadget.google.com/talkgadget/*",
+    "https://*.talkgadget.google.com/talkgadget/*",

[Jamie, 2012/07/17 23:52:20]

Don't you still need the original permission until the Javascript is changed?

[Wez, 2012/07/17 23:53:15]

What stops the app then accessing e.g.
https://myevildomain.com/talkgadget.google.com/talkgadget/?

[Wez, 2012/07/17 23:53:15]

Yes; with this change the app will be able to access foo.talkgadget.google.com
but not talkgadget.google.com...

     "https://relay.google.com/*",
     "clipboardRead",
     "clipboardWrite"
   ],
   "plugins": [
     { "path": "remoting_host_plugin.dll", "public": false },
     { "path": "libremoting_host_plugin.ia32.so", "public": false },
     { "path": "libremoting_host_plugin.x64.so", "public": false },
     { "path": "remoting_host_plugin.plugin", "public": false }
   ]
 }