[BUG]: CSP disabled in Chrome
poeck opened this issue · comments
Describe the bug
As the chrome webstore only allows to release manifest v3 extensions anymore, it's the only browser using v3.
In manifest v2, it was possible to add a listener on web request (see here) and just edit the csp if it exists.
In manifest v3 tho, this API isn't allowed anymore and instead you have to use predefined rules. As you can see here, it currently completely removes CSP-Headers.
Seems like google fonts was the only problem conflicting with a csp.
I switched to a local font and disabled removing/editing csp headers for both v2 and v3 in d4dfc60