Temporarily disable restrictions on who can request chrome-extension://

chrome/renderer/render_view.cc

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/renderer/render_view.h"
 
 #include <algorithm>
 #include <cmath>
 #include <string>
 #include <vector>
@@ skipping 3609 matching lines @@
   WebDataSource* data_source =
       provisional_data_source ? provisional_data_source : top_data_source;
 
   // If the request is for an extension resource, check whether it should be
   // allowed. If not allowed, we reset the URL to something invalid to prevent
   // the request and cause an error.
   GURL request_url(request.url());
   if (request_url.SchemeIs(chrome::kExtensionScheme) &&
       !ExtensionResourceRequestPolicy::CanRequestResource(
           request_url,
-          GURL(frame->url()),
+          GURL(frame->securityOrigin().toString()),

[Aaron Boodman, 2011/02/10 05:25:50]

In the case of iframes that are dynamically created and never assigned a src,
frame->url() will be "about:blank", but the security origin is inherited from
the parent document.

           render_thread_->GetExtensions())) {
     request.setURL(WebURL(GURL("chrome-extension://invalid/")));
   }
 
   if (data_source) {
     NavigationState* state = NavigationState::FromDataSource(data_source);
     if (state && state->is_cache_policy_override_set())
       request.setCachePolicy(state->cache_policy_override());
   }
 
@@ skipping 2132 matching lines @@
   }
 }
 
 void RenderView::OnContextMenuClosed(
     const webkit_glue::CustomContextMenuContext& custom_context) {
   if (custom_context.is_pepper_menu)
     pepper_delegate_.OnContextMenuClosed(custom_context);
   else
     context_menu_node_.reset();
 }