Get JSON in a Chrome extension

The CSP cannot cause the problem you’ve described. It’s very likely that you’re using JSONP instead of plain JSON. JSONP does not work in Chrome, because JSONP works by inserting a <script> tag in the document, whose src attribute is set to the URL of the webservice. This is disallowed by the CSP.

Provided that you’ve set the correct permission in the manifest file (e.g. "permissions": ["http://domain/getjson*"], you will always be able to get and parse the JSON:

var xhr = new XMLHttpRequest();
xhr.onload = function() {
    var json = xhr.responseText;                         // Response
    json = json.replace(/^[^(]*\(([\S\s]+)\);?$/, '$1'); // Turn JSONP in JSON
    json = JSON.parse(json);                             // Parse JSON
    // ... enjoy your parsed json...
};
// Example:
data="Example: appended to the query string..";
xhr.open('GET', 'http://domain/getjson?data=" + encodeURIComponent(data));
xhr.send();

When using jQuery for ajax, make sure that JSONP is not requested by using jsonp: false:

$.ajax({url:"...',
        jsonp: false ... });

Or, when using $.getJSON:

$.getJSON('URL which does NOT contain callback=?', ...);

Leave a Comment