Use WebFrame::setIsolatedWorldSecurityOrigin to allow cross-origin XHRs in content scripts.

chrome/common/extensions/extension_messages.cc

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/common/extensions/extension_messages.h"
 
 #include "chrome/common/extensions/extension_constants.h"
 #include "content/common/common_param_traits.h"
 
 ExtensionMsg_Loaded_Params::ExtensionMsg_Loaded_Params()
@@ skipping 20 matching lines @@
   // As we need more bits of extension data in the renderer, add more keys to
   // this list.
   const char* kRendererExtensionKeys[] = {
     extension_manifest_keys::kPublicKey,
     extension_manifest_keys::kName,
     extension_manifest_keys::kVersion,
     extension_manifest_keys::kIcons,
     extension_manifest_keys::kPageAction,
     extension_manifest_keys::kPageActions,
     extension_manifest_keys::kPermissions,
-    extension_manifest_keys::kApp
+    extension_manifest_keys::kApp,
+    extension_manifest_keys::kContentScripts
   };
 
   // Copy only the data we need.
   for (size_t i = 0; i < ARRAYSIZE_UNSAFE(kRendererExtensionKeys); ++i) {
     Value* temp = NULL;
     if (extension->manifest_value()->Get(kRendererExtensionKeys[i], &temp))
       manifest->Set(kRendererExtensionKeys[i], temp->DeepCopy());
   }
 }
 
@@ skipping 90 matching lines @@
          ReadParam(m, iter, &p->path) &&
          ReadParam(m, iter, p->manifest.get());
 }
 
 void ParamTraits<ExtensionMsg_Loaded_Params>::Log(const param_type& p,
                                                   std::string* l) {
   l->append(p.id);
 }
 
 }  // namespace IPC