fix: Firefox broken — CSP blocks inline early hook script — v2.0.11 · 557b1ffd0c - silent-send

fix: Firefox broken — CSP blocks inline early hook script — v2.0.11

The inline <script> with textContent was blocked by claude.ai's
Content Security Policy on Firefox (Chrome is more permissive).
No fetch interception = no substitution = completely broken on FF.

Fixed by moving the early fetch hook to its own file (early-hook.js)
loaded via <script src="..."> which is CSP-compliant. Added to
web_accessible_resources in both Chrome and Firefox manifests.

Also fixed duplicate 'const api' declaration in injector.js that
would have crashed the content script.

https://claude.ai/code/session_01SWSwDfMVij53bCTNSCLMwn

This commit is contained in:

Claude

2026-03-27 15:04:13 +00:00

parent 85fbc6c4d0

commit 557b1ffd0c

6 changed files with 44 additions and 30 deletions

									
										src/options/options.html
									
		+1
		-1
	
												View File
												
				@@ -591,7 +591,7 @@

				    </section>

				    <footer>

				      <p>Silent Send v2.0.10</p>

				      <p>Silent Send v2.0.11</p>

				    </footer>

				  </div>