Index: extensions/common/csp_validator.cc |
diff --git a/extensions/common/csp_validator.cc b/extensions/common/csp_validator.cc |
index 0ee01168936eb76176efd3dff7e6498cd891c8f0..e8e07176c6ab7d504fb26c7710cd24bc897d7d3e 100644 |
--- a/extensions/common/csp_validator.cc |
+++ b/extensions/common/csp_validator.cc |
@@ -9,6 +9,8 @@ |
#include "base/strings/string_split.h" |
#include "base/strings/string_tokenizer.h" |
#include "base/strings/string_util.h" |
+#include "content/public/common/url_constants.h" |
+#include "extensions/common/constants.h" |
namespace extensions { |
@@ -71,7 +73,8 @@ bool HasOnlySecureTokens(base::StringTokenizer& tokenizer, |
StartsWithASCII(source, "http://localhost:", false) || |
StartsWithASCII(source, "https://", true) || |
StartsWithASCII(source, "chrome://", true) || |
- StartsWithASCII(source, "chrome-extension://", true) || |
+ StartsWithASCII(source, std::string(extensions::kExtensionScheme) + |
+ content::kStandardSchemeSeparator, true) || |
StartsWithASCII(source, "chrome-extension-resource:", true)) { |
continue; |
} |