Index: chrome/browser/resources/chromeos/login/screen_gaia_signin.js |
diff --git a/chrome/browser/resources/chromeos/login/screen_gaia_signin.js b/chrome/browser/resources/chromeos/login/screen_gaia_signin.js |
index 5a18eda474c6a20fe9db84bb48a66e0878716f7d..7ff9ddfe015314929f7dbb99f3b94d4d59e1ef75 100644 |
--- a/chrome/browser/resources/chromeos/login/screen_gaia_signin.js |
+++ b/chrome/browser/resources/chromeos/login/screen_gaia_signin.js |
@@ -66,7 +66,9 @@ cr.define('login', function() { |
* @type {bool} |
*/ |
isAuthExtMessage_: function(e) { |
- return this.extension_url_.indexOf(e.origin) == 0; |
+ return this.extension_url_ != null && |
+ this.extension_url_.indexOf(e.origin) == 0 && |
+ e.source == $('signin-frame').contentWindow; |
}, |
/** |