CHROME扩展笔记之拒绝unsafe-eval求值

你的名字 2022-11-10 14:16 769阅读 0赞

开发插件选项页时由于引用了vue框架开发前端页面，导致拒绝eval求值问题  
Uncaught EvalError: Refused to evaluate a string as JavaScript because ‘unsafe-eval’ is not an allowed source of script in the following Content Security Policy directive: “script-src ‘self’ blob: filesystem:”.  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM1NjA2NDAw_size_16_color_FFFFFF_t_70]  
这是浏览器自带的"网页安全政策"（Content Security Policy）导致的；浏览器默认的Content-Security-Policy的安全政策时“ default-src ‘self’ ”。我们可以通过manifest.json重新配置Content Security Policy的配置开启eval功能;  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM1NjA2NDAw_size_16_color_FFFFFF_t_70 1]

// 代码如下，可直接复制
    ,"content_security_policy": "script-src 'self' 'unsafe-eval'; object-src 'self'"

注意：修改插件配置文件manifest.json需要重新安装插件才能生效（先卸载再重新导入）

参考资料：  
[Chrome扩展程序“拒绝将字符串评估为JavaScript，因为’unsafe-eval’(Chrome extension "Refused to evaluate a string as JavaScript because ‘unsafe-eval’)][Chrome_JavaScript_unsafe-eval_Chrome extension _Refused to evaluate a string as JavaScript because _unsafe-eval]

[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM1NjA2NDAw_size_16_color_FFFFFF_t_70]: /images/20221022/2634fdd2dbbe4ffb8c46d49d05404573.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM1NjA2NDAw_size_16_color_FFFFFF_t_70 1]: /images/20221022/a488d648f5fc4b5390c218d638281eab.png
[Chrome_JavaScript_unsafe-eval_Chrome extension _Refused to evaluate a string as JavaScript because _unsafe-eval]: https://www.it1352.com/820960.html