拒绝加载脚本,因为它违反了以下内容安全策略指令:“script-src'self''unsafe-eval'”

时间:2015-02-07 12:05:23

标签: javascript jquery json google-chrome

我写的chrome扩展应该通知Twitch流。 它适用于html页面(main.html),但不作为扩展。

我收到错误代码: "拒绝加载脚本' https://api.twitch.tv/kraken/streams/x3n1tr0n_?client_id=666&callback=jsonp1423306529793'因为它违反了以下内容安全策略指令:" script-src' self' '不安全-EVAL'"

的manifest.json



{
  "manifest_version": 2,
  "version": "0.1",
  "name" : "CS:GO Server Status", 
  "content_security_policy": "script-src 'self' 'unsafe-eval'; object-src 'self'",
  "permissions": [ "https://api.twitch.tv/kraken/streams/*" ],
  "description" : "Dedicated CS:GO server status checking and user notification.",
    "icons": { "32": "on.png",
             "32": "off.png",
             "128": "logo.png" },
  "browser_action" : {
	"default_title" : "CS:GO Server Status Checker", 
        "default_icon" : "logo.png"},
  "background" : { "scripts":["check.js","jquery.js"] }
  

}




main.html中



<script type="text/javascript" src="jquery.js"></script>
<script type="text/javascript" src="check.js"></script>
&#13;
&#13;
&#13;

check.js

&#13;
&#13;
setInterval(ping,1000);

chrome.browserAction.onClicked.addListener(function () 
{
	ping();
});

function ping() 
{

 
var user_name, api_key, twitch_widget;
user_name = "x3n1tr0n_";
api_key = "666";
twitch_widget = $("#twitch-widget");
twitch_widget.attr("href","https://twitch.tv/" + user_name);

$.getJSON('https://api.twitch.tv/kraken/streams/' + user_name + '?client_id=' + api_key + '&callback=?', function(data) {	
	 if (data.stream==null)
	 {
	 alert('Offline');
	 }
	 else
	  {
	  	alert('Online!!!');
    	}
});

}

ping();
&#13;
&#13;
&#13;

0 个答案:

没有答案