[DevTools] Whitelist remoteBase and loadNetworkResource schemes.

third_party/WebKit/Source/devtools/front_end/Runtime.js

 /*
  * Copyright (C) 2014 Google Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions are
  * met:
  *
  *     * Redistributions of source code must retain the above copyright
  * notice, this list of conditions and the following disclaimer.
  *     * Redistributions in binary form must reproduce the above
@@ skipping 1075 matching lines @@
 })();}
 
 
 // This must be constructed after the query parameters have been parsed.
 Runtime.experiments = new Runtime.ExperimentsSupport();
 
 /**
  * @type {?string}
  */
 Runtime._remoteBase = Runtime.queryParam("remoteBase");
+{(function validateRemoteBase()
+{
+    if (Runtime._remoteBase && !Runtime._remoteBase.startsWith("https://chrome-devtools-frontend.appspot.com/"))
+        Runtime._remoteBase = null;
+})();}
 
 /**
  * @param {string} path
  * @return {string}
  */
 Runtime.resolveSourceURL = function(path)
 {
     var sourceURL = window.location.href;
     if (window.location.search)
         sourceURL = sourceURL.replace(window.location.search, "");
     sourceURL = sourceURL.substring(0, sourceURL.lastIndexOf("/") + 1) + path;
     return "\n/*# sourceURL=" + sourceURL + " */";
 }
 
 /** @type {!Runtime} */
 var runtime;