小编use*_*356的帖子

拒绝执行内联脚本,因为它违反了以下内容安全策略指令:"script-src'self'"

我正在为Rss阅读器创建一个chrome扩展,因为我得到了上述错误.请帮忙

的manifest.json

{
    "name": "Tutorialzine Extension",
        "manifest_version": 2,
        "version": "1.1",
        "description": "Making your first Google Chrome extension.",
        "icons": {
        "128": "icon_128.png"
    },
        "web_accessible_resources": ["script.js", "https://query.yahooapis.com"],
        "browser_action": {
        "default_icon": "icon.png",
            "default_popup": "tutorialzine.html"
    },
        "permissions": ["tabs", "<all_urls", "http://localhost/",
        "http://*/*", "https://*/*", "https://query.yahooapis.com"],
        "content_security_policy": "script-src 'self'; 'https://query.yahooapis.com';unsafe-inline; object-src 'self'"
}
Run Code Online (Sandbox Code Playgroud)

的script.js

$(document).ready(function () {

    var query = "SELECT * FROM feed WHERE url='http://feeds.feedburner.com/Tutorialzine' LIMIT 2";

    // Storing the seconds since the epoch in now:
    var now = (new Date()).getTime() / 1000;

    // If there …
Run Code Online (Sandbox Code Playgroud)

google-chrome google-chrome-extension google-chrome-app

13
推荐指数
1
解决办法
6万
查看次数