Extension resources should only load in contexts the extension has permission to access.

chrome/common/extensions/extension.cc

Index: chrome/common/extensions/extension.cc
diff --git a/chrome/common/extensions/extension.cc b/chrome/common/extensions/extension.cc
index 990271e17965fb76156cfce707cc728c617aec50..fbd36bbec4579c4c133ca2033e766d16c3dfc47e 100644
--- a/chrome/common/extensions/extension.cc
+++ b/chrome/common/extensions/extension.cc
@@ -535,10 +535,27 @@ bool Extension::HasWebAccessibleResources() const {
   return false;
 }
 
+bool Extension::HasNaClModules() const {
+  if (nacl_modules_.size())
+    return true;
+
+  return false;
+}
+
 bool Extension::IsSandboxedPage(const std::string& relative_path) const {
   return ResourceMatches(sandboxed_pages_, relative_path);
 }
 
+bool Extension::IsResourceNaClModule(const std::string& resource) const {
+  GURL url = extension_url_.Resolve(resource);
+  for (std::vector<NaClModuleInfo>::const_iterator it = nacl_modules_.begin();
+       it != nacl_modules_.end(); it++) {
+    if (it->url == url)
+      return true;
+  }
+  return false;
+}
+
 
 std::string Extension::GetResourceContentSecurityPolicy(
     const std::string& relative_path) const {