Fix: Chrome security requirements.

Extract inline handlers to options.js file.