Change CSP img-src directive on about:extensions

[cezaraugusto]

Fix #6257

Auditors: @bbondy

• Submitted a ticket for my issue if one did not already exist.
• Used Github auto-closing keywords in the commit message.
• Ran git rebase -i to squash commits (if needed).

Test Plan:

• Enable an extension
• Open about:extensions
• Extension icon must be visible

[bbondy]

@diracdeltas @bridiver did this change recently? I'm wondering why this would of started happening.

[bridiver]

this actually doesn't look correct to me. An extension shouldn't be loading images from file urls

[diracdeltas]

i think you need to keep '*' and 'data:', otherwise favicons won't load in about:preferences ledger panel

[diracdeltas]

in 0.12.5 i see the pdfjs extension loaded from file:///Users/yan/Library/Application%20Support/Brave/Extensions/jdbefljfgobbmcidnmpjamcbhnbphjnb/1.6.386/icon48.png

[bridiver]

where do you see that @diracdeltas? It should be loading images using chrome-extension urls, not file urls

[diracdeltas]

@bridiver about:extensions

[bridiver]

I think they should be using chrome extension urls

[bbondy]

I'm going to close this in favour of loading the image from the extension itself instead. I'll do a different push for it.