Question

我写了谷歌延伸版,它操纵了本页(实际上增加了一个纽子)。

In my content script, I want to load the Facebook Graph API:

$fbDiv = $(document.createElement( div )).attr( id ,  fb-root );
$fbScript = $(document.createElement( script )).attr( src ,  https://connect.facebook.net/en_US/all.js );
$(body).append($fbDiv);
$(body).append($fbScript);

console.log("fbScript: " + typeof $fbScript.get(0));
console.log("fbScript parent: " + typeof $fbScript.parent().get(0));
console.log("find through body: " + typeof $(body).find($fbScript.get(0)).get(0));

However, the script doesn t seem to added to body. Here s the console log:

fbScript: object
fbScript parent: undefined
find through body: undefined

任何关于我做什么错误的想法?

Answer 1

问题是,内容文字中的 Java本在自己的沙箱环境中运行,只能使用其他瓦 Java文字,其载荷有两种:

Via the manifest:

{
  "name": "My extension",
  ...
  "content_scripts": [
    {
      "js": ["https://connect.facebook.net/en_US/all.js"]
    }
  ],
  ...
}

Or using Programmatic injection:

/* in background.html */
chrome.browserAction.onClicked.addListener(function(tab) {
    chrome.tabs.executeScript(null,
                       {file:"https://connect.facebook.net/en_US/all.js"});
});

1. 确保更新你的明确许可:

/* in manifest.json */
"permissions": [
    "tabs", "https://connect.facebook.net"
 ],

Appending a script tag will in effect evaluate the JavaScript in the context of the containing page, outside of the JavaScript sandbox that your JavaScript has access to.

此外,由于《联邦公报》的文字要求“fb-root”在OMS内,你很可能需要采用方案办法,以便你能够首先用这个要素更新OMM,然后是

Answer 2

谷歌 Chrome的延伸不再直接允许采用外部注射法,但你仍然可以用Ajax电话下载该守则,并将它提供给注射器,就像它是一种密码。

chrome.tabs.query({active: true, currentWindow: true}, function(tabs) {
    $.get("http://127.0.0.1:8000/static/plugin/somesite.js", function(result) {
        chrome.tabs.executeScript(tabs[0].id, {code: result});
    }, "text");
});

source: https://stackoverflow.com/a/36645710/720665

Answer 3

如果你想把它装成内容文字:

fetch( https://example.com/content.js )
  .then(resp => resp.text())
  .then(eval)
  .catch(console.error)

If you want to load it as background script. Take https://example.com/bg.js for example.

add the remote js script to the background page file, which is named background.html here

<!DOCTYPE html>
<html>
<head>
  <script src="https://example.com/bg.js"></script>
</head>
<body>
<div>Empty content</div>
</body>
</html>

add https://example.com to the content_security_policy of the manifest.json:

"background": {
  "page": "background.html"
},
"content_security_policy": "script-src  self  https://example.com ; object-src  self ",

Requirements:

The remote js script must be served via https instead of http.
You should specify a page rather than a scripts array in the background section

友情链接