Closed ShaRose closed 10 years ago
Mmm.... why close it?
Because I found out after finally managing chrome to actually load my manifest changes that github has a header (X-Content-Type-Options: nosniff) that forces strict MIME checking, and github serves raws as text/plain, so chrome will refuse to load any javascript from it. I suppose I should have made a new one which straight up removes it, or one that uses http://rawgit.com/ (was linked on the chrome bug report I found while looking in to the issue).
Added https://raw.githubusercontent.com/ to the content security policy, since https://raw.github.com/ just redirects, causing security failures.