[M54 merge] Lock down creation of blob:chrome-extension URLs from non-extension processes.

third_party/WebKit/LayoutTests/http/tests/xmlhttprequest/xhr-to-blob-in-isolated-world.html

Index: third_party/WebKit/LayoutTests/http/tests/xmlhttprequest/xhr-to-blob-in-isolated-world.html
diff --git a/third_party/WebKit/LayoutTests/http/tests/xmlhttprequest/xhr-to-blob-in-isolated-world.html b/third_party/WebKit/LayoutTests/http/tests/xmlhttprequest/xhr-to-blob-in-isolated-world.html
index aac852c321174d7d978d06ab4400e4beb82db399..3ab77f4cc37a45b8a1f86ca543f746cd0d7518c4 100644
--- a/third_party/WebKit/LayoutTests/http/tests/xmlhttprequest/xhr-to-blob-in-isolated-world.html
+++ b/third_party/WebKit/LayoutTests/http/tests/xmlhttprequest/xhr-to-blob-in-isolated-world.html
@@ -6,8 +6,11 @@ if (!window.testRunner) {
     document.body.appendChild(document.createTextNode("This test requires window.testRunner"));
 } else {
     testRunner.dumpAsText();
-    testRunner.setIsolatedWorldSecurityOrigin(1, "chrome-extension://123");
-    testRunner.evaluateScriptInIsolatedWorld(1, "var xhr = new XMLHttpRequest(); xhr.open('GET', 'blob:chrome-extension://123/456789', false); xhr.send();");
+    // Can't use chrome-extension:// since it's an unknown scheme and
+    // will fail validation in content/ land; so pretend that
+    // https://cloud-cuckoo-land.google:2112 is a chrome extension origin.
+    testRunner.setIsolatedWorldSecurityOrigin(1, "https://cloud-cuckoo-land.google:2112");
+    testRunner.evaluateScriptInIsolatedWorld(1, "var xhr = new XMLHttpRequest(); xhr.open('GET', 'blob:https://cloud-cuckoo-land.google:2112/456789', false); xhr.send();");
 }
 </script>
 </body>