Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(1972)

Unified Diff: chrome/common/extensions/docs/server2/templates/articles/contentSecurityPolicy.html

Issue 10855122: Whitelisting `127.0.0.1` and `localhost` for HTTP in extensions' CSP. (Closed) Base URL: svn://svn.chromium.org/chrome/trunk/src
Patch Set: Second pass. Created 8 years, 4 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
Index: chrome/common/extensions/docs/server2/templates/articles/contentSecurityPolicy.html
diff --git a/chrome/common/extensions/docs/server2/templates/articles/contentSecurityPolicy.html b/chrome/common/extensions/docs/server2/templates/articles/contentSecurityPolicy.html
index 642145a638dcdff213277a3fe1e6bc19fe6bcddb..2ed5b0c8c4ad266c7cb856e512c3589357f6fc0d 100644
--- a/chrome/common/extensions/docs/server2/templates/articles/contentSecurityPolicy.html
+++ b/chrome/common/extensions/docs/server2/templates/articles/contentSecurityPolicy.html
@@ -237,6 +237,13 @@ popup.html:
</p>
<p>
+ To ease development, we're also allowing the whitelisting of resources loaded
+ over HTTP from servers on your local machine. You may whitelist script and
+ object sources on any port of either <code>http://127.0.0.1</code> or
+ <code>http://localhost</code>.
+</p>
+
+<p>
A relaxed policy definition which allows script resources to be loaded from
<code>example.com</code> over HTTPS might look like:
</p>

Powered by Google App Engine
This is Rietveld 408576698