Using chrome extension API in a outer webpage.

[昭]

Hi,everybody:

    I have a chrome extension. In this chrome extension，I visit a webpage that out of this extension using window.open function. What I want to do is using chrome.management in the webpage. But chrome.management API could only be used in a chrome extension and need  declaration in manifest.json file. Is there a way to use chrome.management API in a webpage that being visited by a chrome extension(this webpage is out of extension).

    Thanks!

    wangzhao

 

    

[Devlin Cronin]

There's no way of doing this directly from the webpage for security reasons (we don't want to expose many extension APIs directly to web pages).  The workaround would be to use chrome.runtime.sendMessage (one of the few APIs we do expose) to send a message from the web page to the extension, and then have the extension act on it.  Note that if you do this, you should absolutely check the sender property in runtime.onMessageExternal and validate that the message is something you expect.  Otherwise you could open a big security hole for your users.

[昭]

Thanks.

在 2016年7月19日星期二 UTC+8上午4:53:07，Devlin Cronin写道：