Index: extensions/common/csp_validator.cc |
diff --git a/extensions/common/csp_validator.cc b/extensions/common/csp_validator.cc |
index 0ee01168936eb76176efd3dff7e6498cd891c8f0..94f880e7207e92e972e52a08e5f9c444c4bcb457 100644 |
--- a/extensions/common/csp_validator.cc |
+++ b/extensions/common/csp_validator.cc |
@@ -9,6 +9,8 @@ |
#include "base/strings/string_split.h" |
#include "base/strings/string_tokenizer.h" |
#include "base/strings/string_util.h" |
+#include "content/public/common/url_constants.h" |
+#include "extensions/common/constants.h" |
namespace extensions { |
@@ -71,7 +73,10 @@ bool HasOnlySecureTokens(base::StringTokenizer& tokenizer, |
StartsWithASCII(source, "http://localhost:", false) || |
StartsWithASCII(source, "https://", true) || |
StartsWithASCII(source, "chrome://", true) || |
- StartsWithASCII(source, "chrome-extension://", true) || |
+ StartsWithASCII(source, |
+ std::string(extensions::kExtensionScheme) + |
+ content::kStandardSchemeSeparator, |
+ true) || |
StartsWithASCII(source, "chrome-extension-resource:", true)) { |
continue; |
} |