Do not immediately block cross-renderer extension resource loads for non-web-triggered transitions

chrome/browser/extensions/chrome_url_request_util.cc

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/extensions/chrome_url_request_util.h"
 
 #include <string>
 
 #include "base/files/file_path.h"
 #include "base/memory/weak_ptr.h"
@@ skipping 121 matching lines @@
                                     InfoMap* extension_info_map,
                                     bool* allowed) {
   if (url_request_util::AllowCrossRendererResourceLoad(
           request, is_incognito, extension, extension_info_map, allowed)) {
     return true;
   }
 
   // If there aren't any explicitly marked web accessible resources, the
   // load should be allowed only if it is by DevTools. A close approximation is
   // checking if the extension contains a DevTools page.
-  if (!chrome_manifest_urls::GetDevToolsPage(extension).is_empty()) {
+  if (extension &&
+      !chrome_manifest_urls::GetDevToolsPage(extension).is_empty()) {
     *allowed = true;
     return true;
   }
 
   // Couldn't determine if the resource is allowed or not.
   return false;
 }
 
 net::URLRequestJob* MaybeCreateURLRequestResourceBundleJob(
     net::URLRequest* request,
@@ skipping 26 matching lines @@
                                              resource_id,
                                              content_security_policy,
                                              send_cors_header);
     }
   }
   return NULL;
 }
 
 }  // namespace chrome_url_request_util
 }  // namespace extensions