Always report access control failure if accessing unsupported URL.

Source/platform/weborigin/SchemeRegistry.h

Index: Source/platform/weborigin/SchemeRegistry.h
diff --git a/Source/platform/weborigin/SchemeRegistry.h b/Source/platform/weborigin/SchemeRegistry.h
index ed8011ea9dde5802a0bf9c15fb7c94773ece2a01..680e31e41a7dd19c7d354da2f5e666c980a2f0e1 100644
--- a/Source/platform/weborigin/SchemeRegistry.h
+++ b/Source/platform/weborigin/SchemeRegistry.h
@@ -78,6 +78,9 @@ public:
     static void registerURLSchemeAsCORSEnabled(const String& scheme);
     static bool shouldTreatURLSchemeAsCORSEnabled(const String& scheme);
 
+    // Serialize the registered schemes in a comma-separated list.
+    static String listOfCORSEnabledURLSchemes();

[tyoshino (SeeGerritForStatus), 2014/07/14 07:14:01]

[optional] start with a verb? buildListOf...

[sof, 2014/07/14 08:20:41]

thanks, will wait on abarth's feedback before renaming.

[abarth-chromium, 2014/07/14 16:51:51]

Using a noun phrase is fine.  We're not instructing the SchemeRegistry to do
anything.  We're just asking for the listOfCORSEnabledURLSchemes.

+
     // Allow resources from some schemes to load on a page, regardless of its
     // Content Security Policy.
     static void registerURLSchemeAsBypassingContentSecurityPolicy(const String& scheme);