Enable 3rd party support for Security Keys.

chrome/browser/resources/cryptotoken/manifest.json

 {
   "name": "CryptoTokenExtension",
   "description": "CryptoToken Component Extension",
-  "version": "0.9.6",
+  "version": "0.9.10",
   "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7zRobvA+AVlvNqkHSSVhh1sEWsHSqz4oR/XptkDe/Cz3+gW9ZGumZ20NCHjaac8j1iiesdigp8B1LJsd/2WWv2Dbnto4f8GrQ5MVphKyQ9WJHwejEHN2K4vzrTcwaXqv5BSTXwxlxS/mXCmXskTfryKTLuYrcHEWK8fCHb+0gvr8b/kvsi75A1aMmb6nUnFJvETmCkOCPNX5CHTdy634Ts/x0fLhRuPlahk63rdf7agxQv5viVjQFk+tbgv6aa9kdSd11Js/RZ9yZjrFgHOBWgP4jTBqud4+HUglrzu8qynFipyNRLCZsaxhm+NItTyNgesxLdxZcwOz56KD1Q4IQIDAQAB",
   "manifest_version": 2,
   "permissions": [
     "cryptotokenPrivate",
     "hid",
     "usb",
+    "cryptotokenPrivate",

[xiyuan, 2014/12/13 04:36:30]

Isn't this listed on line 8 already?

[Arnar Birgisson, 2014/12/13 04:46:53]

Done.  Indeed, bad merge.

+    "externally_connectable.all_urls",

[xiyuan, 2014/12/13 04:36:30]

This looks wrong. Line 27 looks the one needed.

[juanlang, 2014/12/13 04:42:39]

They're both needed: this permission is required to set the matches string, see
https://codereview.chromium.org/599163003

[xiyuan, 2014/12/13 04:46:09]

Aha. You are right. Ignore my comment then. :p

[Arnar Birgisson, 2014/12/13 04:46:53]

Acknowledged. We tested with only line 27 and it indeed didn't suffice.

     "u2fDevices",
-    "https://www.gstatic.com/",
+    "https://*/*",
+    "http://*/*",
     {
       "usbDevices": [
         {
           "vendorId": 4176,
           "productId": 529
         }
       ]
     }
   ],
   "externally_connectable": {
     "matches": [
-      "https://login.corp.google.com/*",
-      "https://accounts.google.com/*",
-      "https://myaccount.google.com/*",
-      "https://security.google.com/*"
+      "<all_urls>"
     ],
     "ids": [
       "fjajfjhkeibgmiggdfehjplbhmfkialk"
     ],
     "accepts_tls_channel_id": true
   },
   "background": {
     "persistent": false,
     "scripts": [
       "util.js",
@@ skipping 12 matching lines @@
       "closeable.js",
       "requesthelper.js",
       "webrequestsender.js",
       "enroller.js",
       "requestqueue.js",
       "signer.js",
       "origincheck.js",
       "textfetcher.js",
       "appid.js",
       "watchdog.js",
-      "gstaticorigincheck.js",
-      "googleapprovedorigins.js",
+      "etld_names_list.js",
+      "etld.js",
+      "etldorigincheck.js",
+      "cryptotokenapprovedorigins.js",
       "gnubbydevice.js",
       "hidgnubbydevice.js",
       "usbgnubbydevice.js",
       "gnubbies.js",
       "gnubby.js",
       "gnubby-u2f.js",
       "gnubbyfactory.js",
       "singlesigner.js",
       "multiplesigner.js",
       "generichelper.js",
       "inherits.js",
       "individualattest.js",
       "devicefactoryregistry.js",
       "usbhelper.js",
       "usbenrollhandler.js",
       "usbsignhandler.js",
       "usbgnubbyfactory.js",
       "googlecorpindividualattest.js",
       "cryptotokenbackground.js"
     ]
   }
 }