Change wildcard source expression matching to conform latest spec
This patch changes wildcard source expression matching to require
schemes other than http/https/ws/wss be explicitly present
in the source list to match, per
https://w3c.github.io/webappsec-csp/#match-url-to-source-expression
This also updates CSP injected in inline_login_ui.cc to explicitly allow
`chrome:` as in `connect-src * chrome:` to fix failing tests.
This also changes Content Security Policy in manifests of Feedback and
PDF Viewer extensions to allow objects from `file:`.
BUG=611314
R=mkwst@chromium.org
CQ_INCLUDE_TRYBOTS=master.tryserver.chromium.linux:closure_compilation
Review-Url: https://codereview.chromium.org/2209113002
Cr-Commit-Position: refs/heads/master@{#410566}
8 files changed
