karandeepb, can you help us to have tests for this?
We are planning to enable OOR-CORS soon, and will have CORS checks for file URL scheme again for the new code path. In the new code path, this check is not optional, but mandatory.

Actually, ExtensionApiTest.FileURLs may be the test for this?
It fails with kOutOfBlinkCORS now.

But it may be not enough to detect the case of crbug/895999 because it passed even we have the yhirano's check.

I am quite swamped right now, so won't be able to get to this soon. Not sure why ExtensionApiTest.FileURLs didn't fail.

Assigning to toyoshim@ in the meanwhile.

Can you find someone from extension experts?
It looks a little hard to add tests in this area for Blink people.

I'm currently focusing on making existing tests work to enable OOR-CORS by default. So, adding new tests would be the second priority for me at this moment.