title: CORS Chrome Extension with manifest version 2
body: <p>Is it possible to use CORS when writing a google chrome extension?</p>
  
  <p>I saw this, 
  <a href="http://developer.chrome.com/extensions/contentSecurityPolicy.html" rel="noreferrer">http://developer.chrome.com/extensions/contentSecurityPolicy.html</a></p>
  
  <p>And I tried inserting this into the manifest,
  "content_security_policy": "script-src 'self' <a href="https://twitter.com/" rel="noreferrer">https://twitter.com/</a>; object-src 'self'",</p>
  
  <p>but an ajax requestion fails with 
  XMLHttpRequest cannot load <a href="https://twitter.com/" rel="noreferrer">https://twitter.com/</a>. Origin chrome-extension://olimhkjfpndfhdopbneamnekfalckinc is not allowed by Access-Control-Allow-Origin.</p>