Skip to content

Instantly share code, notes, and snippets.

View amad-person's full-sized avatar
🎯
Focusing

Aadyaa Maddi amad-person

🎯
Focusing
32 followers · 24 following
View GitHub Profile
@amad-person
amad-person / FindAndSeekFrontEnd.md
Last active December 3, 2018 08:19
Extracts from Find And Seek's Front End for CS3281

Find And Seek Client

A CTRL-F for video. This document contains relevant information and code extracts from the front end of the project.

Tech Stack:

  • Client was built using ReactJS.
  • Styled using reactstrap, a Bootstrap port for ReactJS.

Links:

@amad-person
amad-person / gist:f0ef85a2123a2e1fcf8052dcf09eef90
Last active August 12, 2023 17:38
Bypass CSP restrictions in create-react-app Chrome extensions

While building a React Chrome extension using the create-react-app utility (v2.x), I came across the following error on loading my unpacked extension:

Refused to execute inline script because it violates the following Content Security Policy directive: “script-src ‘self’
blob: filesystem: chrome-extension-resource:”. Either the ‘unsafe-inline’ keyword, a hash (‘sha256-
GgRxrVOKNdB4LrRsVPDSbzvfdV4UqglmviH9GoBJ5jk=’), or a nonce (‘nonce-…’) is required to enable inline execution.

Basically, this error arises as Chrome (or almost any modern browser) will not allow inline scripts to get executed. This CSP restriction resulted in the above error as the build script in create-react-app bundles the .js files in <script> tags in the <body> of index.html.