You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
@Acobat12 No, the main reason I quoted #265 was to tell you that our current implementation is not force inject into the content context in all cases when there is an valid @grant.
For clarity, I drew this diagram for your reference:
flowchart LR
A{"@inject-into"} -->|page| PAGE("page with none advanced APIs") -->|CSP violations| F{"@inject-into omit/auto?"}
A -->|omit/auto| C{"any valid @grant?"}
A -->|content| CONTENT(content with granted advanced APIs)
C -->|omit/none| PAGE
C -->|yes| CONTENT
F -->|fallback| CONTENT
Originally posted by @ACTCD in #945
We should add this diagram to the README document to reduce user friction and make it easier to understand.