Remove URLs from chrome.tabs.executeScript permission warning.

extensions/common/manifest_constants.cc

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "extensions/common/manifest_constants.h"
 
 namespace extensions {
 
 namespace manifest_keys {
 
@@ skipping 244 matching lines @@
     "Hosted apps that use 'background_page' must have the 'background' "
     "permission.";
 const char kBackgroundRequiredForPlatformApps[] =
     "Packaged apps must have a background page or background scripts.";
 const char kCannotAccessAboutUrl[] =
     "Cannot access \"*\" at origin \"*\". Extension must have permission to "
     "access the frame's origin, and matchAboutBlank must be true.";
 const char kCannotAccessChromeUrl[] = "Cannot access a chrome:// URL";
 const char kCannotAccessExtensionUrl[] =
     "Cannot access a chrome-extension:// URL of different extension";
+// This deliberately does not contain a URL. Otherwise an extension can parse
+// error messages and determine the URLs of open tabs without having appropriate
+// permissions to see these URLs.
 const char kCannotAccessPage[] =
+    "Cannot access contents of the page. "
+    "Extension manifest must request permission to access the respective host.";
+// Use this error message with caution and only if the extension triggering it
+// has tabs permission. Otherwise, URLs may be leaked to extensions.
+const char kCannotAccessPageWithUrl[] =
     "Cannot access contents of url \"*\". "
     "Extension manifest must request permission to access this host.";
 const char kCannotChangeExtensionID[] =
     "Installed extensions cannot change their IDs.";
 const char kCannotClaimAllHostsInExtent[] =
     "Cannot claim all hosts ('*') in an extent.";
 const char kCannotClaimAllURLsInExtent[] =
     "Cannot claim all URLs in an extent.";
 const char kCannotScriptGallery[] =
     "The extensions gallery cannot be scripted.";
@@ skipping 443 matching lines @@
     "'file_system_provider_capabilities' section to be specified in the "
     "manifest.";
 const char kInvalidFileSystemProviderMissingPermission[] =
     "The 'file_system_provider_capabilities' section requires the "
     "'fileSystemProvider' permission to be specified in the manifest.";
 #endif
 
 }  // namespace manifest_errors
 
 }  // namespace extensions