Remove the need for a content script and use the chrome.tabs.executeScript() function instead.  This reduces potentially unsafe permissions required to none :)