I don't know enough about the chromium security model to validate your assumptions. I'm speaking more as an API, this is what it should do. Presumably the impl

I don't know enough about the chromium security model to validate your assumptions. I'm speaking more as an API, this is what it should do. Presumably the implementation would have a mechanism for tracking injected code and treating modified code as suspect.