GitLab

Extensions are not allowed to inject scripts on the webstore, and
shouldn't be allowed to XHR it in a same-origin fashion. Instead, force
extension XHRs to the webstore to use CORS.

Bug: 826946

Change-Id: Ia38698a2e31931bc410c8e6ba10569706c9f3d90
Reviewed-on: https://chromium-review.googlesource.com/1012520
Commit-Queue: Devlin <rdevlin.cronin@chromium.org>
Reviewed-by: Karan Bhatia <karandeepb@chromium.org>
Cr-Commit-Position: refs/heads/master@{#552099}