4 ms·
Interesting. So CSP will stop web pages from loading content located at the chrome-extension:// scheme? From the docs it seems that it will stop the extension
by benmccann 15y ago
Interesting. So CSP will stop web pages from loading content located at the chrome-extension:// scheme? From the docs it seems that it will stop the extension from loading certain resources, but it's not clear that it will stop the page from loading extension resources.
http://code.google.com/chrome/extensions/trunk/contentSecurityPolicy.html http://code.google.com/chrome/extensions/trunk/contentSecuri...
- abarth 15y agoCSP doesn't impose that restriction, but it's something we're changing at the same time: "A package's resources are no longer available by default to external websites (as the src of an image, or a script tag)." http://code.google.com/chrome/extensions/dev/manifestVersion.html http://code.google.com/chrome/extensions/dev/manifestVersion...