Javascript Google Chrome 扩展程序 - 脚本注入
声明：本页面是StackOverFlow热门问题的中英对照翻译，遵循CC BY-SA 4.0协议，如果您需要使用它，必须同样遵循CC BY-SA许可，注明原文地址和作者信息，同时你必须将它归于原作者（不是我）：StackOverFlow
原文地址: http://stackoverflow.com/questions/10527625/
Warning: these are provided under cc-by-sa 4.0 license. You are free to use/share it, But you must attribute it to the original authors (not me):
StackOverFlow
Google Chrome Extension - Script Injections
提问by Nick Fury
I'm trying to get my Chrome Extension to inject some javascript with content_scripts, using this previous answeras a reference.
我正在尝试让我的 Chrome 扩展程序使用 .js 注入一些 javascript content_scripts，使用之前的答案作为参考。
manifest.json
清单文件
"name": "My Chrome Extension",
"version": "1.0",
"manifest_version": 2,
"content_scripts": [{
"matches": ["http://pagetoinject/script/into/*"],
"js": ["contentscript.js"]
}]
contenscript.js:
contenscript.js：
var s = document.createElement('script');
s.src = chrome.extension.getURL("script.js");
(document.head||document.documentElement).appendChild(s);
s.parentNode.removeChild(s);
( also tried thismethod with no success. )
（也试过 这个没有成功的方法。)
var s = document.createElement('script');
s.src = chrome.extension.getURL("script.js");
s.onload = function() {
this.parentNode.removeChild(this);
};
(document.head||document.documentElement).appendChild(s);
I keep getting this javascript error. Here's a screenshot.
我不断收到此 javascript 错误。这是一个屏幕截图。
GET chrome-extension://invalid/
(anonymous function)
GET chrome-extension://invalid/
(anonymous function)
回答by Rob W
- In your manifest file,
"manifest_version": 2is specified. This automatically activates a stricter mode, in which all extension's files are not available to web pages by default. - Your original code would never work, because the
<script>element is immediately removed after injection (the script file does not have a chance to load).
- 在您的清单文件中，
"manifest_version": 2指定了。这会自动激活更严格的模式，在该模式下，默认情况下所有扩展程序的文件都不可用于网页。 - 您的原始代码永远不会工作，因为该
<script>元素在注入后立即被删除（脚本文件没有机会加载）。
As a result of 1., the following error shows up in the console:
作为 1. 的结果，控制台中显示以下错误：
Failed to load resource chrome-extension://invalid/
To fix the problem, add script.jsto the whitelist, "web_accessible_resources"in your manifest file:
要解决此问题，请添加script.js到白名单，"web_accessible_resources"在您的manifest file：
{
"name": "Chrome Extension",
"version": "1.0",
"manifest_version": 2,
"content_scripts": [{
"matches": ["http://pagetoinject/script/into/*"],
"js": ["contentscript.js"]
}],
"web_accessible_resources": ["script.js"]
}
回答by Abhishek Deora
In addition to the answers above I notice that in your contentscript.jsyou are just adding another script i.e script.jsWhy don't you directly add script.jsthrough content_scripts in manifest.json.
除了上面的答案，我注意到contentscript.js您只是在添加另一个脚本，即script.js为什么不直接script.js通过 content_scripts添加manifest.json。
回答by Kim T
Another reason for getting this error is if the url is being blocked by CORS. Check the network request header of the page to see if it contains Content-Security-Policy:
出现此错误的另一个原因是 url 是否被 CORS 阻止。检查页面的网络请求头，看是否包含Content-Security-Policy：
Content-Security-Policy: default-src 'self' http://example.com; connect-src http://example.com/; script-src http://example.com/
You can try opening the url in a new browser tab to verify the image url is correct:
您可以尝试在新的浏览器选项卡中打开 url 以验证图像 url 是否正确：
chrome-extension://mjcbjlencnokpknflpneebajalcnnifo/images/pattern.jpg
One way around this is to use an image data URI:
解决此问题的一种方法是使用图像数据 URI：
data:image/gif;base64,R0lGODlhEAAQAMQAAORHHOVSKudfOulrSOp3WOyDZu6QdvCchPGolfO0o/XBs/fNwfjZ0frl3/zy7////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACH5BAkAABAALAAAAAAQABAAAAVVICSOZGlCQAosJ6mu7fiyZeKqNKToQGDsM8hBADgUXoGAiqhSvp5QAnQKGIgUhwFUYLCVDFCrKUE1lBavAViFIDlTImbKC5Gm2hB0SlBCBMQiB0UjIQA7
回答by Jophin Joseph
The problem here is that you are using manifest_version : 2. If you make that manifest-version: 1you'll not have any problems. Version 2 restricts many such features to improve security. Refer Google Content Security Policyfor more details on the restrictions imposed in manifest version 2. I could not find your specific case mentioned in the CSP but when I changed the manifest version to 1 and executed your code it is working fine.
这里的问题是您正在使用manifest_version : 2. 如果你做到了，manifest-version: 1你就不会有任何问题。版本 2 限制了许多此类功能以提高安全性。有关清单版本 2 中施加的限制的更多详细信息，请参阅Google 内容安全政策。我在 CSP 中找不到您提到的具体情况，但是当我将清单版本更改为 1 并执行您的代码时，它工作正常。
