Chrome Extension “Refused to load the script because it violates the following Content Security Policy directive”

As explained on the Chome website,
there is a Content Security Policy preventing your script to load remote script:

A relaxed policy definition which allows script resources to be loaded from example.com over HTTPS might look like:

“content_security_policy”: “script-src ‘self’ https://example.com; object-src ‘self'”

So in your case, the manifest.json should contain:

 {
  "name": "My Extension",
  "manifest_version": 2,
  "background":{
     "scripts": [...]
  },
  "content_security_policy": "script-src 'self' https://example.com; object-src 'self'",
 }

Leave a Comment