We are working on an Open Source Chrome extension: Digital Assistant Client
Product Demo:
Part 1: https://www.youtube.com/watch?v=Iz2WgKY0fhc
Part 2: https://www.youtube.com/watch?v=i0_MNfBnYfM
I am planning to move my extension from v2 to v3. I have functionality where i inject script to the head section as text. In v3 they were saying if i add the script it will be considered as remotely hosted code and all the remotely hosted code should be bundled along with the extension package Link. Here is the sample of my code.
var s = document.createElement('script');
s.async = false;
s.onload = function() {
};
s.text = `
my logic goes here
`;
(document.head || document.documentElement).appendChild(s);
Will my script injection will get stopped? If so what alternative should i use?
Thanks,
Yureshwar Ravuri
Will my script injection will get stopped? - Yureshwar
If so what alternative should i use?
--
You received this message because you are subscribed to the Google Groups "Chromium Extensions" group.
To unsubscribe from this group and stop receiving emails from it, send an email to chromium-extens...@chromium.org.
To view this discussion on the web visit https://groups.google.com/a/chromium.org/d/msgid/chromium-extensions/e1f793d4-69fc-478e-b6d7-184420a6a927n%40chromium.org.
To view this discussion on the web visit https://groups.google.com/a/chromium.org/d/msgid/chromium-extensions/CAFY0HLPJ_3LqS_G6dDcTXfgniB2wbXjJAYcNZS11-W05%2BJsa0g%40mail.gmail.com.
To unsubscribe from this group and stop receiving emails from it, send an email to chromium-extensions+unsub...@chromium.org.
To view this discussion on the web visit https://groups.google.com/a/chromium.org/d/msgid/chromium-extensions/e1f793d4-69fc-478e-b6d7-184420a6a927n%40chromium.org.
--
You received this message because you are subscribed to the Google Groups "Chromium Extensions" group.
To unsubscribe from this group and stop receiving emails from it, send an email to chromium-extensions+unsub...@chromium.org.
To unsubscribe from this group and stop receiving emails from it, send an email to chromium-extens...@chromium.org.
To view this discussion on the web visit https://groups.google.com/a/chromium.org/d/msgid/chromium-extensions/e1f793d4-69fc-478e-b6d7-184420a6a927n%40chromium.org.
--
You received this message because you are subscribed to the Google Groups "Chromium Extensions" group.
To unsubscribe from this group and stop receiving emails from it, send an email to chromium-extens...@chromium.org.
Manifest V3's CSP is the thing that breaks injection. - Alexei
Developer Program Policies shouldn't apply here; the code being injected is indeed part of the extension's package, no "fetching from remote source" - Alexei
I wanted to check in to see whether the team had any thoughts on:Disabling the isolated worlds restriction on default CSP for content scripts.
In the future we are planning to add world specification support to both static and dynamic content script registration. We are also planning to add func/arg support to dynamic content scripts.