chrome-devtools-mcp-for-extension 0.18.2 → 0.18.3

package/build/src/tools/gemini-web.js

@@ -181,27 +181,30 @@ export const askGeminiWeb = defineTool({
             response.appendResponseLine('質問を送信中...');
             // Input text using the textbox element
             // Gemini uses a textbox with role="textbox" or a div with contenteditable
+            // NOTE: Gemini has Trusted Types CSP, so we cannot use innerHTML directly
             const questionSent = await page.evaluate((questionText) => {
+                // Helper to clear element content without innerHTML (CSP-safe)
+                const clearElement = (el) => {
+                    while (el.firstChild) {
+                        el.removeChild(el.firstChild);
+                    }
+                };
                 // Try textbox first (Gemini's current implementation)
                 const textbox = document.querySelector('[role="textbox"]');
                 if (textbox) {
                     textbox.focus();
-                    // Clear existing content
-                    textbox.innerHTML = '';
-                    // Insert text
-                    const p = document.createElement('p');
-                    p.textContent = questionText;
-                    textbox.appendChild(p);
+                    // Clear existing content (CSP-safe)
+                    clearElement(textbox);
+                    // Insert text using textContent (CSP-safe)
+                    textbox.textContent = questionText;
                     textbox.dispatchEvent(new Event('input', { bubbles: true }));
                     return true;
                 }
                 // Fallback to contenteditable
                 const editor = document.querySelector('div[contenteditable="true"]');
                 if (editor) {
-                    editor.innerHTML = '';
-                    const p = document.createElement('p');
-                    p.textContent = questionText;
-                    editor.appendChild(p);
+                    clearElement(editor);
+                    editor.textContent = questionText;
                     editor.dispatchEvent(new Event('input', { bubbles: true }));
                     return true;
                 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "chrome-devtools-mcp-for-extension",
-  "version": "0.18.2",
+  "version": "0.18.3",
   "description": "MCP server for Chrome extension development with Web Store automation. Fork of chrome-devtools-mcp with extension-specific tools.",
   "type": "module",
   "bin": "./scripts/cli.mjs",