Loading external javascript in google chrome extension

后端未结

关注

 3  1736

暗喜

I\'m writing a Google Chrome extension which manipulates the current page (basically adds a button).

In my content script, I want to load the Facebook Graph API:

相关标签:

3条回答

旧巷少年郎

2020-11-28 05:16
Google Chrome extensions no longer allow injecting external code directly, however you can still download the code with an Ajax call and feed it to the injector as if it was a code block.
```
chrome.tabs.query({active: true, currentWindow: true}, function(tabs) {
    $.get("http://127.0.0.1:8000/static/plugin/somesite.js", function(result) {
        chrome.tabs.executeScript(tabs[0].id, {code: result});
    }, "text");
});
```
source: https://stackoverflow.com/a/36645710/720665
0 讨论(0)
发布评论:

提交评论
- 加载中...
旧时难觅i

2020-11-28 05:18
The issue is that the JavaScript inside the content scripts runs in its own sandboxed environment and only has access to other JavaScript that was loaded in one of two ways:

Via the manifest:
```
{
  "name": "My extension",
  ...
  "content_scripts": [
    {
      "js": ["https://connect.facebook.net/en_US/all.js"]
    }
  ],
  ...
}
```
Or using Programmatic injection:
```
/* in background.html */
chrome.browserAction.onClicked.addListener(function(tab) {
    chrome.tabs.executeScript(null,
                       {file:"https://connect.facebook.net/en_US/all.js"});
});
```
Be sure to update your manifest permissions:
```
/* in manifest.json */
"permissions": [
    "tabs", "https://connect.facebook.net"
 ], 
```
Appending a script tag will in effect evaluate the JavaScript in the context of the containing page, outside of the JavaScript sandbox that your JavaScript has access to.

Also, since the FB script requires the "fb-root" to be in the DOM, you will probably need to use the programmatic approach so that you can first update the DOM with the element, then pass a message back to the background page to load the Facebook script so it is accessible to the JavaScript that is loaded in the content scripts.
0 讨论(0)
发布评论:

提交评论
- 加载中...
有刺的猬

2020-11-28 05:19
If you want to load it as content script:
```
fetch('https://example.com/content.js')
  .then(resp => resp.text())
  .then(eval)
  .catch(console.error)
```
If you want to load it as background script. Take https://example.com/bg.js for example.
1. add the remote js script to the background page file, which is named background.html here
```
<!DOCTYPE html>
<html>
<head>
  <script src="https://example.com/bg.js"></script>
</head>
<body>
<div>Empty content</div>
</body>
</html>
```
1. add https://example.com to the content_security_policy of the manifest.json:
```
"background": {
  "page": "background.html"
},
"content_security_policy": "script-src 'self' https://example.com ; object-src 'self'",
```
Requirements:
1. The remote js script must be served via https instead of http.
2. You should specify a page rather than a scripts array in the background section
0 讨论(0)
发布评论:

提交评论
- 加载中...