Domanda

I have several QUnit tests running successfully for our extension.

I'd like to gather code coverage information, and thought I would use blanket.js to do so.

However, when I click the 'Enable coverage' button, I see several CSP violation messages in the JavaScript Console:

Refused to execute inline script because it violates the following Content Security Policy directive: "default-src 'self' 

I've tried updating the content security policy of the extension, adding 'unsafe-inline' and 'unsafe-eval'. With the 'unsafe-inline', Chrome doesn't load the extension. And the 'unsafe-eval' option doesn't fix the problem.

Below is the snippet of CSP from my manifest.json file:

"content_security_policy": "default-src  'unsafe-inline' 'self'"

Is there a way to get blanket.js to run successfully for a Chrome extension?

If not, is there an alternative to blanket.js for Chrome extensions?

I'm currently using:

Chrome 34 blanket - v1.1.5 QUnit v1.10.0

Any help would be appreciated.

È stato utile?

Soluzione

You can try changing the implementation of _addScript to:

function(data) {
    (1,eval)(data);
}

And adding 'unsafe-eval' to your CSP.

Autorizzato sotto: CC-BY-SA insieme a attribuzione
Non affiliato a StackOverflow
scroll top