Enforce a Restricted Content Security Policy by Default

Including a strict Content Security Policy in the manifest by default encourages developers to follow security coding practices.
seenyat · Nov 29, 2018 · 628c04f · 628c04f
1 parent f493616
commit 628c04f
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/dist/manifest.json b/dist/manifest.json
@@ -23,6 +23,7 @@
     "permissions": [
       "https://*/*"
     ],
+    "content_security_policy": "default-src 'self';",
     "content_scripts": [
       {
         "matches": [
@@ -34,4 +35,4 @@
       }
     ]
   }
-
+