[Bug]: Potential CSP Issue in Chrome 130

shikhir-arora commented 1 month ago

Version

0.0.1.5-PUBLIC-BETA

Describe the bug

I wanted to express my gratitude for creating such an excellent extension that is open-source, well-documented, clean, and lightweight.

I typically use Chrome Canary as my daily browser. However, a recent change in CSP policies or how the browser handles them seems to be affecting the loading of the Complexity extension. I used the extension for a few days, and it worked perfectly. However, currently, only the CSS injection seems to be working. I have attached several relevant screenshots below. I have also tried everything in Incognito Mode with no other extensions enabled.

I appreciate the effort you've put into this project. Please let me know if you can reproduce this issue. 🙂

Steps to reproduce

Please take a look at the screenshots below! 👍

Bug confirmation

[X] I am not able to reproduce the issue with the extension disabled
[X] I have re-installed the extension and the issue persists

Expected behavior

Normal behaviour, i.e:

Screenshots

Browser

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36

Additional context

No response

pnd280 commented 1 month ago

ce9242a0538e86b88ee455b2dea55598f6c779db should fix the issue. The fix is somewhat hacky since @crxjs/vite-plugin doesn't have an option to disable use_dynamic_url, which is most likely the cause that triggers the CSP

https://github.com/pnd280/complexity/releases/tag/v0.0.1.6-alpha

shikhir-arora commented 1 month ago

@pnd280 - Thank you, it works great! 👍

pnd280 / complexity