eslint-plugin-chrome-extensions 1.0.0 → 1.0.1

package/README.md

@@ -274,8 +274,8 @@ If you trust every external caller and open tab.
   
   {
 -     "permissions": ["browserAction", "tabs"],
--     "optional_permissions": ["history", "pageAction"]
 +     "permissions": ["tabs"],
+-     "optional_permissions": ["history", "pageAction"]
 +     "optional_permissions": ["history"]
   }
 ```
@@ -321,7 +321,7 @@ If you don't want permission validation at all. For custom permissions from a Ch
 ```diff
   // manifest.json
   {
-!     "permissions": []
+!   "permissions": []
   }
 
   // background.js
@@ -334,8 +334,8 @@ If you don't want permission validation at all. For custom permissions from a Ch
 ```diff
   // manifest.json
   {
--     "permissions": []
-+     "permissions": ["cookies", "history"]
+-   "permissions": []
++   "permissions": ["cookies", "history"]
   }
 
   // background.js
@@ -392,11 +392,6 @@ If you use APIs through aliases or wrappers that obscure the original call site.
 ! const run = eval('1 + 1')
 ! setTimeout('doThing()', 1000)
 ! await import('https://cdn.example.com/lib.js')
-! document.head.append(Object.assign(document.createElement('script'),
-!     { src: 'https://cdn.example.com/remote.js' }))
-
-  const secret = 'abc'
-! chrome.scripting.executeScript({ func: () => alert(secret), target: { tabId } })
 ```
 
 #### <img width=13 height=13 src="https://cdn.staticdelivr.com/gl/adamlui/eslint-plugin-greasemonkey/99f14247b2/assets/images/icons/square/with-symbol/green.svg" align="bottom"> Correct code
@@ -408,14 +403,6 @@ If you use APIs through aliases or wrappers that obscure the original call site.
 + setTimeout(doThing, 1000)
 - await import('https://cdn.example.com/lib.js')
 + await import('./lib.js')
-- document.head.append(Object.assign(document.createElement('script'),
--     { src: 'https://cdn.example.com/remote.js' }))
-+ document.head.append(Object.assign(document.createElement('script'),
-+     { src: chrome.runtime.getURL('inject.js') }))
-
-  const secret = 'abc'
-- chrome.scripting.executeScript({ func: () => alert(secret), target: { tabId } })
-+ chrome.scripting.executeScript({ func: (s) => alert(s), args: [secret], target: { tabId } })
 ```
 
 #### When not to use it
@@ -459,7 +446,7 @@ Never (MV3 CSP blocks remote code at runtime).
 ```diff
   // manifest.json
   {
-!     "permissions": ["tabs", "downloads"]
+!   "permissions": ["tabs", "downloads"]
   }
 
   // background.js
@@ -471,8 +458,8 @@ Never (MV3 CSP blocks remote code at runtime).
 ```diff
   // manifest.json
   {
--     "permissions": ["tabs", "downloads"]
-+     "permissions": ["tabs"]
+-   "permissions": ["tabs", "downloads"]
++   "permissions": ["tabs"]
   }
 
   // background.js
@@ -520,9 +507,9 @@ If you access the granted API through an alias or computed property rather than
 ```diff
   // manifest.json
   {
-!     "manifest_version": 2,
-      "name": "My Extension",
-      "version": "1.0.0"
+!   "manifest_version": 2,
+    "name": "My Extension",
+    "version": "1.0.0"
   }
 ```
 
@@ -531,10 +518,10 @@ If you access the granted API through an alias or computed property rather than
 ```diff
   // manifest.json
   {
--     "manifest_version": 2,
-+     "manifest_version": 3,
-      "name": "My Extension",
-      "version": "1.0.0"
+-   "manifest_version": 2,
++   "manifest_version": 3,
+    "name": "My Extension",
+    "version": "1.0.0"
   }
 ```
 
@@ -592,10 +579,10 @@ If you intentionally target MV2 for a Chromium fork that still supports it.
       "manifest_version": 3,
 -     "browser_action": {},
 -     "page_action": {},
--     "background": { "scripts": ["bg.js"], "persistent": true },
--     "content_security_policy": "script-src 'self' 'unsafe-eval'"
 +     "action": {},
+-     "background": { "scripts": ["bg.js"], "persistent": true },
 +     "background": { "service_worker": "sw.js" },
+-     "content_security_policy": "script-src 'self' 'unsafe-eval'"
 +     "content_security_policy": { "extension_pages": "script-src 'self'; object-src 'self'" }
   }
 ```

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "eslint-plugin-chrome-extensions",
-  "version": "1.0.0",
+  "version": "1.0.1",
   "description": "ESLint rules for Chrome extensions",
   "type": "module",
   "engines": {