Chromium Code Reviews| Index: chrome/renderer/extensions/extension_resource_request_policy.cc |
| =================================================================== |
| --- chrome/renderer/extensions/extension_resource_request_policy.cc (revision 113054) |
| +++ chrome/renderer/extensions/extension_resource_request_policy.cc (working copy) |
| @@ -38,6 +38,15 @@ |
| return false; |
| } |
| + // Disallow loading of extension resources which are not explicitely listed |
| + // as web accessible if the manifest version is 2 or greater. |
| + if (extension->manifest_version() < 2 && |
|
abarth-chromium
2011/12/07 22:55:34
Do you mean >= 2?
Cris Neckar
2011/12/09 00:13:06
Done.
|
| + !extension->CanWebAccessResource(resource_url.path())) { |
| + LOG(ERROR) << "Denying load of " << resource_url.spec() << " which " |
| + << "is not a web accessible resource."; |
| + return false; |
| + } |
| + |
| return true; |
| } |