Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(8137)

Unified Diff: chrome/common/extensions/csp_validator.cc

Issue 10873060: Adding 'blob:' and 'filesystem:' URLs as secure sources for extensions. (Closed) Base URL: svn://svn.chromium.org/chrome/trunk/src
Patch Set: Created 8 years, 4 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
Index: chrome/common/extensions/csp_validator.cc
diff --git a/chrome/common/extensions/csp_validator.cc b/chrome/common/extensions/csp_validator.cc
index 9138f5c9aef8c420331393603d23736c3422ca62..d172349203c872d6585f9994d87b9e3a02ef3652 100644
--- a/chrome/common/extensions/csp_validator.cc
+++ b/chrome/common/extensions/csp_validator.cc
@@ -53,7 +53,9 @@ bool HasOnlySecureTokens(StringTokenizer& tokenizer) {
StartsWithASCII(source, "https://", true) ||
StartsWithASCII(source, "chrome://", true) ||
StartsWithASCII(source, "chrome-extension://", true) ||
- StartsWithASCII(source, "chrome-extension-resource:", true)) {
+ StartsWithASCII(source, "chrome-extension-resource:", true) ||
+ StartsWithASCII(source, "blob:", true) ||
+ StartsWithASCII(source, "filesystem:", true)) {
abarth-chromium 2012/08/24 14:55:00 I suspect this should be LowerCaseEqualsASCII. "b
continue;
}
« no previous file with comments | « no previous file | chrome/common/extensions/csp_validator_unittest.cc » ('j') | chrome/common/extensions/csp_validator_unittest.cc » ('J')

Powered by Google App Engine
This is Rietveld 408576698