Allow http, https, and file in content scripts