How to find where my extension is using remotely hosted code

[Alex S]

Hi, 

We got a notice from the Chrome Web Store that an update to our mv3 extension contains remotely hosted code.  Is there a way to get any more context about which part of our extension was detected to have remotely hosted code. 

We do not intentionally include remotely hosted code and we've been on mv3 for several months now without this warning popping up.  It's quite difficult to trace down what the source of this warning could be - if you have a way on your end to surface that information, it would make it so I can fix the problem much faster.

I've tried reproducing and looking at console logs for csp errors but there are none.

Thanks!

[Patrick Kettner]

Can you share the extension id?

--
You received this message because you are subscribed to the Google Groups "Chromium Extensions" group.
To unsubscribe from this group and stop receiving emails from it, send an email to chromium-extens...@chromium.org.
To view this discussion on the web visit https://groups.google.com/a/chromium.org/d/msgid/chromium-extensions/4446eb72-c2dd-4a2d-9e59-b8d644be5977n%40chromium.org.

[Alex Shoykhet]

Yep - hnfanknocfeofbddgcijnmhnfnkdnaad

[Alexander Shoykhet]

Just closing the loop here. 

The issue was the google analytics ga.js file that we were including.  It used remote code and the webstore had just never alerted on it before.

Thanks

To view this discussion on the web visit https://groups.google.com/a/chromium.org/d/msgid/chromium-extensions/CAMmH096YZH%3D2eDRhoRHTeEd5cbF2_-t4yzcg533ibfHtdcQ-%2BA%40mail.gmail.com.