Context Navigation

← Previous Ticket
Next Ticket →

#11249 closed bug

CSP error in Chrome 18 when loading jQuery 1.7.1 — at Initial Version

Reported by:	adblockforchrome	Owned by:
Priority:	low	Milestone:	1.8
Component:	support	Version:	1.7.1
Keywords:		Cc:
Blocked by:		Blocking:

Description

jQuery version 1.7.1 Chrome version 18.0.1003.1

Repro:

Load in Chrome the extension that is attached to this post (unzip the .zip then drag the .crx onto Chrome).
Open the Web Inspector Console on the page that appears.

Expected results: No errors. The page does nothing but load jQuery.

Actual results: 5 "Refused to apply inline style because of Content-Security-Policy." errors.

---

You can unzip the attachment and drag the .crx onto Chrome to install it. Here is the contents of the extension. The important part is that manifest.json enables CSP, and page.html includes jQuery.

manifest.json:

{
  "name": "jQuery CSP fail",
  "version": "1",
  "permissions": [ "http://*/*", "https://*/*" ],
  "content_security_policy": "default-src 'self'",
  "background_page": "background.html"
}

background.html:

<script src="background.js"></script>

background.js:

chrome.tabs.create({url:"page.html"});

page.html:

<!DOCTYPE html>
<html>
  <head><script src="jquery.min.js"></script></head>
  <body>
    Open the Web Inspector console to see the jQuery errors.
  </body>
</html>

jquery.min.js:

The minified jQuery 1.7.1 code.

Note: See TracTickets for help on using tickets.

Bug Tracker