Improve error message for insecure 'content_security_policy' manifest entries.

chrome/common/extensions/extension_manifest_constants.cc

Index: chrome/common/extensions/extension_manifest_constants.cc
diff --git a/chrome/common/extensions/extension_manifest_constants.cc b/chrome/common/extensions/extension_manifest_constants.cc
index ad5e4463af89a82b7a6fb50802c4e549f287ef97..2c59078a0196e763f5fffbfb09f97ab3a5421b03 100644
--- a/chrome/common/extensions/extension_manifest_constants.cc
+++ b/chrome/common/extensions/extension_manifest_constants.cc
@@ -452,6 +452,11 @@ const char kInvalidWebURLs[] =
     "Invalid value for 'app.urls'.";
 const char kInvalidZipHash[] =
     "Required key 'zip_hash' is missing or invalid.";
+const char kInsecureContentSecurityPolicy[] =
+    "Invalid value for 'content_security_policy': The 'script-src' and"
+    " 'object-src' directives can only whitelist secure resources. You may"

[Aaron Boodman, 2012/08/30 04:31:47]

For the second sentence, how about:

You may include any of the following sources: 'self', 'http://localhost',
'http://127.0.0.1', or any https:// or chrome-extension:// origin. For more
information see: <link to extensions doc>.

+    " include the source expression \"'self'\", HTTPS and chrome-extension:"
+    " origins, as well as 'http://127.0.0.1' and 'http://localhost').";
 const char kLaunchPathAndExtentAreExclusive[] =
     "The 'app.launch.local_path' and 'app.urls' keys cannot both be set.";
 const char kLaunchPathAndURLAreExclusive[] =