@mikewest - Given a strict CSP, can a content script add a script tag sourcing a chrome-extension://my-extension/blah.js URL?
-
-
thanks..noticed it was allowed, but wasn’t in electron..wasn’t sure how to reconcile.
-
fwiw, from a CRX you can always call executeScript, which behaves similarly to injecting a script tag
-
(but it runs on your isolated world)
-
yeah..I was looking at from a content script only.
-
try import statements?
-
looking at react dev tool extension..seems to delay most JS import until after it detects a react page.
-
works in chrome, breaks in an electron app with strict csp.
-
whitelisting chrome-extension://react-dev-tools on script-src worked, but isn’t ideal.
- 6 more replies
New conversation -
-
-
doesn’t appear a public issue.
-
See https://golubovic.net/thesis/master.pdf … Section 6.2.2 (page 52 in PDF) h/t
@_qll_ Mike has a patch AFAIR
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.