CSP directive violated - options.html

33 views
Skip to first unread message

Siddardha G

unread,
Mar 12, 2013, 3:16:26 AM3/12/13
to bite-d...@googlegroups.com
Hi,

There seems to be some issue in the extension options page. I think the options_script.js is not getting loaded from the options page. The developer console is showing the following two errors:

Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'self' 'unsafe-eval' https://d1n0x3qji82z53.cloudfront.net https://ssl.google-analytics.com". options.html:17
Refused to execute inline event handler because it violates the following Content Security Policy directive: "script-src 'self' 'unsafe-eval' https://d1n0x3qji82z53.cloudfront.net https://ssl.google-analytics.com". options.html:22

Is there some fix for this? Possibly tweaking the options.html file around. Thanks!

--
Siddardha

Jason Stredwick

unread,
Mar 12, 2013, 12:02:58 PM3/12/13
to bite-d...@googlegroups.com
Should be fixed.  The issue was I had missed updating the options page for V2 Chrome Extensions.  In V2 Chrome Extensions one can not set handlers for elements within the HTML file.  One also can't have explicit JavaScript in HTML either.

I pushed my changes.  Please pull and let me know if you have further problems.

Jason

Siddardha G

unread,
Mar 13, 2013, 1:58:41 AM3/13/13
to bite-d...@googlegroups.com
Hi Jason,

It says no changes have been pushed. Could you check once again ?

Thanks,
Siddardha G

Jason Stredwick

unread,
Mar 13, 2013, 2:03:22 AM3/13/13
to bite-d...@googlegroups.com
Ok, I forgot to push master.  Can you try again?


On Tuesday, March 12, 2013 12:16:26 AM UTC-7, Siddardha G wrote:

Siddardha G

unread,
Mar 13, 2013, 7:15:16 AM3/13/13
to bite-d...@googlegroups.com
Its working. Thanks.
Reply all
Reply to author
Forward
0 new messages