清單中的Firebase內容安全策略更改

Question

我試圖通過我的Chrome擴展來訪問我的Firebase數據庫。 我不斷收到這樣的： -

我的清單文件中有這一行content_security_policy-

"content_security_policy": "script-src 'self' https://cdn.firebase.com https://*.firebaseio.com; object-src 'self'". 

編輯，這是錯誤的文字： -

拒絕框架'https：// .firebaseapp.com/.... ，因爲它違反了以下內容安全策略指令：「幀-SRC https://clients4.google.com/insights/consumersurveys/https://calendar.google.com/accounts/ '自我' https://accounts.google.com/https://apis.google.com/u/https://apis.google.com/_/streamwidgets/https://clients6.google.com/static/https://content.googleapis.com/static/https://mail-attachment.googleusercontent.com/https://www.google.com/calendar/https://calendar.google.com/calendar/https://docs.google.com/https://drive.google.com的https：// .googleusercontent.com /文檔/ securesc/https://feedback.googleusercontent.com/resources/https://www.google.com/tools/feedback/https://support.google.com/inapp/的https：// .googleusercontent.com /小工具/ IFR https://hangouts.google.com/https://talkgadget.google.com/的https：// .talkgadget.google.com/https://www-gm-opensocial.googleusercontent.com/gadgets/https://plus.google.com/https://wallet.google.com/gmail/https://www.youtube.com/embed/https://clients5.google.com/pagead/drt/dn/https://clients5.google.com/ads/measurement/jn/https://www.gstatic.com/mail/ww/https://www.gstatic.com/mail/intl/https://clients5.google.com/webstore/wall/https://ci3.googleusercontent.com/https://apis.google.com/additnow/https://www.gstatic.com/mail/promo/https://notifications.google.com/https://mail-payments.google.com/mail/payments/「。

拒絕加載腳本「https://...firebaseio.com/ .....因爲它違反了以下內容安全政策指令：「劇本-SRC https://clients4.google.com/insights/consumersurveys/‘自我’'不安全內聯‘不安全-EVAL’https://mail.google.com/_/scs/mail-static/https://hangouts.google.com/https://talkgadget.google.com/ HTTPS：/ /*.talkgadget.google.com/ https://www.googleapis.com/appsmarket/v2/installedApps/https://www-gm-opensocial.googleusercontent.com/gadgets/js/https://docs.google.com/static/doclist/client/js/https://www.google.com/tools/feedback/https://s.ytimg.com/yts/jsbin/https://www.youtube.com/iframe_apihttps://ssl.google-analytics.com/https://apis.google.com//scs/abc-static/https://apis.google.com/js/https://clients1.google.com/complete/https://apis.google.com//scs/apps-static/_/js/https://ssl.gstatic.com/inputtools/js/https://ssl.gstatic.com/cloudsearch/static/o/js/https://www.gstatic.com/feedback/js/https://www.gstatic.com/common_sharing/static/client/js/https://www.gstatic.com/og/_/js/」。

我正在嘗試遠程注入此腳本的firebase數據庫。 ： -

var config = { 
     apiKey: -----, 
     authDomain: -----, 
     databaseURL: ----, 
     storageBucket: ----, 
     }; 
     firebase.initializeApp(config); 
     var dbRef=firebase.database().ref().child('text'); 
     $("#h1").on('keyup',function(){ 
     dbRef.set($("#h1").html()); 
     }); 

我應該怎麼做才能解決這個錯誤？

Answer 1

拒絕加載腳本「https://...firebaseio.com/ .....因爲它違反了以下內容安全策略directiv

你應該在你的擴展本身的firebase.js腳本，而不是試圖加載它來自公共場所。