Index: chrome/common/extensions/csp_validator.cc |
diff --git a/chrome/common/extensions/csp_validator.cc b/chrome/common/extensions/csp_validator.cc |
index 9138f5c9aef8c420331393603d23736c3422ca62..1ade6248d5b2df335531cd10ba62e391e7cd6d26 100644 |
--- a/chrome/common/extensions/csp_validator.cc |
+++ b/chrome/common/extensions/csp_validator.cc |
@@ -47,6 +47,8 @@ bool HasOnlySecureTokens(StringTokenizer& tokenizer) { |
if (source == "'self'" || |
source == "'none'" || |
source == "http://127.0.0.1" || |
+ LowerCaseEqualsASCII(source, "blob:") || |
+ LowerCaseEqualsASCII(source, "filesystem:") || |
LowerCaseEqualsASCII(source, "http://localhost") || |
StartsWithASCII(source, "http://127.0.0.1:", false) || |
StartsWithASCII(source, "http://localhost:", false) || |