Comment #12 on issue 11854 by Sebastian.zim: Extensions should be allowed  
to load some chrome:// URLs
http://code.google.com/p/chromium/issues/detail?id=11854

In theory, we could create an API to access thumbnails/favicons bit this  
could be
overly complex.

I am not sure that extensions should be able to access chrome://theme/ ,  
this could be
considered a security flaw.

I guess that whitelisting these hosts would be the simplest method, we  
would just have
to be really careful about protecting against XSS.

--
You received this message because you are listed in the owner
or CC fields of this issue, or because you starred this issue.
You may adjust your issue notification preferences at:
http://code.google.com/hosting/settings

-- 
Automated mail from issue updates at http://crbug.com/
Subscription options: http://groups.google.com/group/chromium-bugs

Reply via email to