Index: chrome/common/extensions/csp_validator.cc |
diff --git a/chrome/common/extensions/csp_validator.cc b/chrome/common/extensions/csp_validator.cc |
index 9138f5c9aef8c420331393603d23736c3422ca62..d172349203c872d6585f9994d87b9e3a02ef3652 100644 |
--- a/chrome/common/extensions/csp_validator.cc |
+++ b/chrome/common/extensions/csp_validator.cc |
@@ -53,7 +53,9 @@ bool HasOnlySecureTokens(StringTokenizer& tokenizer) { |
StartsWithASCII(source, "https://", true) || |
StartsWithASCII(source, "chrome://", true) || |
StartsWithASCII(source, "chrome-extension://", true) || |
- StartsWithASCII(source, "chrome-extension-resource:", true)) { |
+ StartsWithASCII(source, "chrome-extension-resource:", true) || |
+ StartsWithASCII(source, "blob:", true) || |
+ StartsWithASCII(source, "filesystem:", true)) { |
abarth-chromium
2012/08/24 14:55:00
I suspect this should be LowerCaseEqualsASCII. "b
|
continue; |
} |