[Android] Disable CORS for file:// schemes.

Cross-Origin request breaks the web security policy, only same-origin
request could be allowed for file:// schemes.

BUG=https://github.com/crosswalk-project/crosswalk/issues/790