Chrom API 学习笔记

最新推荐文章于 2025-09-11 21:03:21 发布

weixin_34026484

最新推荐文章于 2025-09-11 21:03:21 发布

阅读量106

点赞数

CC 4.0 BY-SA版权

文章标签： python javascript ViewUI

原文链接：https://my.oschina.net/mercyyang/blog/607439

本文详细介绍了Chrome应用的Content Security Policy (CSP)限制及其遵守方法，包括生命周期工作流程、上传应用至开发者仪表板的具体步骤以及使用Apache Cordova进行开发的注意事项。

The content security policy for Chrome Apps restricts you from doing the following:

You can’t use inline scripting in your Chrome App pages. The restriction bans both <script> blocks and event handlers (<button οnclick="...">).
You can’t reference any external resources in any of your app files (except for video and audio resources). You can’t embed external resources in an iframe.
You can’t use string-to-JavaScript methods like eval() and new Function().

How to comply with CSP

All JavaScript and all resources should be local (everything gets packaged in your Chrome App).

3、Upload your app via the Developer Dashboard

Compress your application's root directory (the folder containing the manifest.json file) into a .zip file.
Go to the Chrome Web Store Developer Dashboard and log in with a developer-verified Google Account. (If you don't have a verified account, you can sign up for a nominal fee.)
Click Add new item.
Accept the terms and services agreement to continue.
Use the choose file dialog box to find the .zip file in your system. Select that file to upload.

4、CCA

To use Apache Cordova with an existing Chrome App, you use the cca (c ordova c hrome a pp) command-line tool.