Almost all actions in Declarative Web Request require all_urls host permissions

chrome/test/data/extensions/api_test/webrequest/test_declarative2.js

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 var onRequest = chrome.declarativeWebRequest.onRequest;
 var AddResponseHeader =
     chrome.declarativeWebRequest.AddResponseHeader;
 var RequestMatcher = chrome.declarativeWebRequest.RequestMatcher;
 var CancelRequest = chrome.declarativeWebRequest.CancelRequest;
 var RedirectByRegEx = chrome.declarativeWebRequest.RedirectByRegEx;
@@ skipping 236 matching lines @@
               "result.pass = (cookieMap.passedCookie === 'Foo') &&" +
               "              (cookieMap.addedCookie === 'Foo') &&" +
               "              (cookieMap.editedCookie === 'bar') &&" +
               "              !cookieMap.hasOwnProperty('deletedCookie');" +
               "chrome.extension.sendRequest(result);"});
         });
       }
     );
   },
 
-  function testPermission() {
-    // Test that a redirect is ignored if the extension has no permission.
-    // we load a.html from a.com and issue an XHR to b.com, which is not
-    // contained in the extension's host permissions. Therefore, we cannot
-    // redirect the XHR from b.com to a.com, and the request returns the
-    // original file from b.com.
-    ignoreUnexpected = true;
-    expect();
-    onRequest.addRules(
-      [ {'conditions': [new RequestMatcher({'url': {'pathContains': ".json"}})],
-         'actions': [
-             new RedirectRequest({'redirectUrl': getURLHttpSimple()})]}
-      ],
-      function() {
-        var callback = chrome.test.callbackAdded();
-        navigateAndWait(getURL("simpleLoad/a.html"), function() {
-          var asynchronous = false;
-          var req = new XMLHttpRequest();
-          req.onreadystatechange = function() {
-            if (this.readyState != this.DONE)
-              return;
-            // "{}" is the contents of the file at getURLHttpXHRData().
-            if (this.status == 200 && this.responseText == "{}\n") {
-              callback();
-            } else {
-              chrome.test.fail("Redirect was not prevented. Status: " +
-                  this.status + ", responseText: " + this.responseText);
-            }
-          };
-          req.open("GET", getURLHttpXHRData(), asynchronous);
-          req.send();
-        });
-      }
-    );
-  },
-
   function testRequestHeaders() {
     ignoreUnexpected = true;
     expect(
       [
         { label: "onErrorOccurred",
           event: "onErrorOccurred",
           details: {
             url: getURLHttpSimple(),
             fromCache: false,
             error: "net::ERR_BLOCKED_BY_CLIENT"
@@ skipping 11 matching lines @@
              },
              'requestHeaders': [{ nameContains: "" }],
              'excludeRequestHeaders': [{ valueContains: ["", "value123"] }]
               })],
          'actions': [new CancelRequest()]}
       ],
       function() {navigateAndWait(getURLHttpSimple());}
     );
   },
   ]);