1

当我尝试<script src="https://savehut.xyz/files/file.js"></script>使用 chrome 扩展时出现此错误:

Refused to load the script 'https://savehut.xyz/files/file.js' because it violates the following Content Security Policy directive: "script-src 'self'". Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback.

我的 manifest.json 文件中有这个:(它是 manifest v3 btw)

"content_security_policy": {
    "script-src": "'self' 'unsafe-eval' https://cdn.jsdelivr.net/* https://savehut.xyz/* 'unsafe-inline';"
}

jsdelivr 有效,但 savehut.xyz 无效。

顺便说一句,文件位置不是/files/file.js,这只是一个示例

4

0 回答 0