Index: chrome/browser/extensions/extension_protocols.cc |
=================================================================== |
--- chrome/browser/extensions/extension_protocols.cc (revision 55538) |
+++ chrome/browser/extensions/extension_protocols.cc (working copy) |
@@ -79,9 +79,12 @@ |
// Don't allow extension resources to be loaded from origins which are not |
// present in the extension's effective host permissions with the exception |
- // of empty origins and extension schemes. |
+ // of empty origins, extension schemes and DevTools front-end. |
+ GURL origin_url = GURL(info->frame_origin()); |
if (!info->frame_origin().empty() && |
- !GURL(info->frame_origin()).SchemeIs(chrome::kExtensionScheme)) { |
+ !origin_url.SchemeIs(chrome::kExtensionScheme) && |
+ !(origin_url.SchemeIs(chrome::kChromeUIScheme) && |
+ origin_url.host() == chrome::kChromeUIDevToolsHost)) { |
ExtensionExtent host_permissions = |
context->GetEffectiveHostPermissionsForExtension(request->url().host()); |
if (!host_permissions.ContainsURL(GURL(info->frame_origin()))) |