mohamedmansour/extended-embed-extension — pull request #1 by mikewest (2011-10-29 10:24:24+00:00)
Title: Adding `content_security_policy`.

Hey Mohamed! Would you mind pulling in a `content_security_policy` definition? Best practice! Mitigate permission leakage! Set a good example!

This involves two things: First, `manifest.json` defines a policy that blocks external resources by default, and only allows JavaScript from this extension's origin. Second, inline JavaScript from `background.html` is pulled out into `/js/background.js`. That's it! Easy!

Thanks!

-Mike